135 matches found
Malicious code in perf-data-tables (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dbafd7f735f6fa5bec3af236673c8d99293ed8731c9e57fe12120420d23582f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bitski-quickstart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945ed09381c13f2926bc022b49d387b98033af2d2902b04470773bcaaa171edc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in com.microsoft.msbuildforunity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607ea0058d1b63f51440a9b8e0a25eed7a8eed54f8ebd565b45421786668c7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in airbnb-fejax (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a5d8291648852f65ecc9dede614ddf371329c23f6b138cf4a9950eed7d0b183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dapp-inter-agservers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2725f08125ad49db6e4beb536c94c7c696b83eaf8a823a70d2cea9279677e568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in minis-samples (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c077b52bdf5ba9829bbb40e34b43aca9f4191c5c87ac682e35e3d0f758763777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zcli-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f985abbb6312ed73fdb0530b9d318e7f6231b64924bd534acce93774e72a5e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dashboard-modules (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2616bed5786e244ce809de0caa8e23eb8d4725566cdad7f1d4d8f5f85a5f9286 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-devtools-release-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea7f251efb5b52e9221271c637b06b4d48a22a5c0e762a8723498050b5adf80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pco_api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9c8289fc4eb78d3e66ed76818f5f799edc0dbee5bebe64774a03a2c3148158b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GRUB2 Boothole Buffer Overflow Vulnerability (CVE-2020-10713) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
On July 29, 2020, Eclypsium researchers disclosed a high-risk vulnerability in GRUB2 GRand Unified Bootloader version 2 affecting billions of Linux and Windows systems, even when secure boot is enabled. CVE-2020-10713 is assigned to this buffer overflow vulnerability, termed as “Boothole”...
8 on 1 9: The Shadow-Brokers the leaked file description, technical analysis on-the vulnerability warning-the black bar safety net
! 0x01 exposure data with the equation and NSA relationship From the leaked data packet with the decompressed content to see, specifically for the firewall device attack and penetration action when the use of the tool set. According to the data exposed persons Shadow Brokers described, this packe...
NSA Planted Stuxnet-Type Malware Deep Within Hard Drive Firmware
The U.S. National Security Agency NSA may be hiding highly-sophisticated hacking payloads in the firmware of consumer hard drives over the last 15 to 20 years in a campaign, giving the agency the means to eavesdrop on thousands of targets’ computers, according to an analysis by Kaspersky labs and...
Apple Patches Thunderstrike Bug in OSX, Fixes More Than 30 Flaws in iOS
Apple has released major security updates for both OS X and iOS that includes patches for a number of bugs that could lead to arbitrary code execution. The release of iOS 8.1.3 fixes a vulnerability that allowed an attacker to bypass the sandbox restrictions in Safari and the OS X update fixes a...
Thunderstrike Apple Mac OS X Firmware Bootkit Unveiled
A vulnerability at the heart of Apple’s Mac OS X systems—one thus far only partially addressed by Apple—opens the door to the installation of malicious firmware bootkits that resist cleanup and give hackers persistent, stealthy control over a compromised Mac. The research is the work of a reverse...