A Dangerous Worm Is Eating Its Way Through Software Packages

Plus: An investigation reveals how US tech companies reportedly helped build China’s sweeping surveillance state, and two more alleged members of the Scattered Spider hacking group were arrested...

Malicious code in lynx-explorer (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in suchinind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...

Malicious code in supply_chain_test_quang (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9374e2a02144addb7ed698eac9189f2c556781a55dd381f4cf4d28d8ae95d07b Any computer that has this package installed or running should be considered...

GHSA-GVGC-3CH5-PX8P vulnerabilities

Vulnerabilities for packages: tiff...

DSA-6000-1 libcpanel-json-xs-perl - security update

Bulletin has no description...

Malicious code in @dramateas/quas-mollitia-quas-dolorem (npm)

The package @dramateas/quas-mollitia-quas-dolorem was found to contain malicious code...

Malicious code in @teamteanpm2024/eligendi-consectetur-eius (npm)

The package @teamteanpm2024/eligendi-consectetur-eius was found to contain malicious code...

Malicious code in @teamteanpm2024/ipsa-dignissimos-consequatur (npm)

The package @teamteanpm2024/ipsa-dignissimos-consequatur was found to contain malicious code...

Malicious code in @zalastax/nolb-_neg (npm)

The package @zalastax/nolb-neg was found to contain malicious code...

Malicious code in @zalastax/nolb-cid (npm)

The package @zalastax/nolb-cid was found to contain malicious code...

Malicious code in @zalastax/nolb-domw (npm)

The package @zalastax/nolb-domw was found to contain malicious code...

Malicious code in @zalastax/nolb-lih (npm)

The package @zalastax/nolb-lih was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lb (npm)

The package @zalastax/nolb-lion-lb was found to contain malicious code...

Malicious code in alpha-november-lemon-enndq (npm)

The package alpha-november-lemon-enndq was found to contain malicious code...

Malicious code in bella-nasisayur96-kyuki (npm)

The package bella-nasisayur96-kyuki was found to contain malicious code...

Malicious code in blossom_vvkcd_wyskm_crystal (npm)

The package blossomvvkcdwyskmcrystal was found to contain malicious code...

Malicious code in bunyan-xanadu-spica-pegasus (npm)

The package bunyan-xanadu-spica-pegasus was found to contain malicious code...

Malicious code in by-wealth-led (npm)

The package by-wealth-led was found to contain malicious code...

Malicious code in cluster-dynamo-cressida-zooarchaeology (npm)

The package cluster-dynamo-cressida-zooarchaeology was found to contain malicious code...