A Door Isn’t a Door When It’s Ajar- Part 1

A Door Isn’t a Door When It’s Ajar - Part 1 By Trellix · August 11, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Executive Summary Target Selection What is it? Reconnaissance & Standard Operations Recon Standard Operations Hardware Hacking Hardware Hacking Shopping Lis...

MAL-2022-2030 Malicious code in com.apple.core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04dce69e2156838ee67de58072330026dc7b798f485a1b8e3bebabbc37dfd9b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5140 Malicious code in ot-pausedetector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c29b4ba669bb741f074eb27f5c671dbe0f9e7376cda6b3f855fb2849338f5f18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-490 Malicious code in @ovh-ui/oui-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd838a562723ac4fbede3258309a65e5e3776514834b52fd6ade65549684068a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1705 Malicious code in bscscan.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc61ddd54c8bd426984274d585e3589da32c52995aed3371b4eb591beca1d12f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1022 Malicious code in antd-form-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc32bc73be14dc59b38126b0360d4228f51855a1766affb2b795bddf67179d85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-123 Malicious code in @biz-vue/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998e6df772b0c28b9ac5292e89a1046a507d4e588ac7a59b0e8080525cd0c1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2407 Malicious code in deere-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4872d39ec3fd4c04d5d042ba001480f7e3d8cc24fe7f7e8b5951300aa6ddfd3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4302 Malicious code in libz.jquery (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1882d78f8f6b2b42c81f0042abc678c5c24a8aa3ad8930c1b6a1d1b444e54e44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6868 Malicious code in ushqiwbcxlevakrd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 559e87d5d8465fa29270e83292693021fce66c800aa260bdeb282ef6aa6ecaa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7354 Malicious code in ylropkmdjbvxiekt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55eb80568835e7bb9431c954c9742fef9341f895a5f7eb60cf0c9e560c11867d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5053 Malicious code in okqaelhmbfuwipvz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c01ccb3601c78a3af99f6779be6a4d9295bc0cf449116648d5c7e493fc01aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5315 Malicious code in pgovlicdntbzhskr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ec36765a04cf822dc49fae14e94138952c1e3e8da442a6e9de033cc5500d5a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4197 Malicious code in kmcwtjlfiaznysxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95b82b634074fa8dc64e1863e5aba285b7b5838ce24a35a10b281b3f85dc3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5537 Malicious code in qczwaksngjpbehxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8dae403730c70d248e78d104cf07a2e3ddff86cc2aa6be9a85c2e60b55986fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bkmcjhroagplxsne (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae88ab118672cde3a5bd798c768d4da5661ae382512e2ff5bd50dfed4ee75ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6948 Malicious code in vjlruxeiqtanmkoy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed08a1eca2a64e747ba6c960f8f42992242e229a2e601a0470b422819a96c01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How Shady Code Commits Compromise the Security of the Open-Source Ecosystem

In this blog entry, we discuss how open-source code has been subjected to protest-driven code modifications by its maintainers or backers. We also provide an analysis of what these incidents could mean for the IT industry and the open source community...

Malicious code in npm_jithin_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe6d3415e7a0c1e5adbb042b381add7fda870b487e95f01cf92f736d0af21578 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-487 Malicious code in @ovh-ui/oui-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc446acbcde3cb8149a13344305559cde9a9acee013c00efa4096db154923897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...