Malicious code in hardhat-modern (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364a19411c6fa78338bfd1eb9f6987f560554219e531430448430f84c4ecb947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-472 Malicious code in @nexthink/nxassignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d043c7c51527af4df411fb2065193d718f4418b1430694005230b161860fce58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-466 Malicious code in @nexthink/flow-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c51ef940352ec2e2336f99764ff744f2303934f43534c72e57d768be83c6c240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5406 Malicious code in polkadot-staking-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ac6037f8efd8498b7430ec7d3450fcbb584dbf0f9e2761e9c12a0a0b8d255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6001 Malicious code in selfbots-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd02f7dae53a61aeaad39564c4c3265905c2518087360d0f2be2cafd48f3648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3414 Malicious code in google-iot-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b6b3105c3a643952ccd44dddd3ed028de61de359b2072023d06603b08279588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4851 Malicious code in nibushidao-dsda-sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63b831db25b34beca7bde32dc00f45f2c5c00a434ad0ff4a30a04fcfb5a4a92a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1684 Malicious code in brimo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40fea7443241a7aa4082bf6fec7fb49f51e2dcc12f3981b9f93f07aaea8eafce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wnode-acche (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93e54423a0d5c99bb30985df9179c866ec8d49b346e320759fe918b3f27bde1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5761 Malicious code in rescet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aabf2c9229ae077476547f406c6042b1a37e697b3d76ff3a3d53baa08aa3ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in es6shi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1fd3c9cc582952a620d895c578f77b2d31691e655de26e6730ae876ebda37b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5422 Malicious code in possnested (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5499bf98d70d34501138bf621598f52c8d37bd13386e067ef0f46d7e030468a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4863 Malicious code in nldeuuid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e70189184a849d9b06d62dd7f8a1af9f04ad3793ac157fcd293e30880afdc103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5261 Malicious code in pdatuenotifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5addb01bc00d6cab3978eef8a34e228c21d843b7ca9587b098a6ea41808e4c97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4361 Malicious code in lodashassig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c11b52d0bebdc9f41d5e9a3d2ec22570aee12d1d86b7747a22f307cabddc538 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3107 Malicious code in forktscheckerwebpajwkplugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 246b1a4d849d3cc0a675900e047fae99377172d96881ac4bccf33bffe3aa76eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2931 Malicious code in expressyession (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dd77b38de4c164acad3eaefe866cf8aa425910d85ba58a1204307f9810596da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1426 Malicious code in babelplugintransfomreactremoveproptypes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 118d5e800455cde3fd9da5c424f41242c449f5bdb4665b9f989cffe0d63e215c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babeltmplatp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dcad78a24dccde3934835e1444d4b6c36ef75ea9ac0a5e5bbca0ab691fd220b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A Door Isn’t a Door When It’s Ajar- Part 1

A Door Isn’t a Door When It’s Ajar - Part 1 By Trellix · August 11, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Executive Summary Target Selection What is it? Reconnaissance & Standard Operations Recon Standard Operations Hardware Hacking Hardware Hacking Shopping Lis...