Malicious code in new-code-script-f-r-e-e-actors-tycoon-script-t5fhi5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a5f1736ff58b1ee45e9727786fd5a975016912c7d0aaef296236022638c8fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in replaceable-media-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6f6611eabb1686bf9e41a305a75a4bce89c0c30c903fc91235ffd22895e097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Decoy Dog: New Breed of Malware Posing Serious Threats to Enterprise Networks

A deeper analysis of a recently discovered malware called Decoy Dog has revealed that it's a significant upgrade over the Pupy RAT, an open-source remote access trojan it's modeled on. "Decoy Dog has a full suite of powerful, previously unknown capabilities – including the ability to move victims...

Malicious code in event-bus-xp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c07adaaa07d3ae57c467363592ac7248926a1bcb8225dcca948c207ab59fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed674eef3c547c5b88c4d1f78f844e5bc4653a001ad23538ade6652afb5feb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-5368

ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF Cross Site Request Forgery which allows a remote attack to make changes to the web application as the current logged in victim. If the victim visits a malicious web page, the attacker can silently and...