MAL-2024-488 Malicious code in wlwz-2312-3503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37821dcee33f95f4b953ea27d72c65c60194f7a9bf534d52b43687fac80898a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-392 Malicious code in wlwz-2312-2406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e160a6dd6d6ff375eaf51af8afdc05d16877d99bdf8df7bc4aa09368be629a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-285 Malicious code in wlwz-2312-1207 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6d30f3b3752bf7c07fe0b580a994e2e5905e2887b2d5583d204b19c6b12676d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-752 Malicious code in wlwz-2312-6406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d702d1cafdfa66fa7341b61c006295dc7cc0f63eb73d8b159d5fcf5b91ea98d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2604 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cf7fa5b62edc20d99aea700624d4e3fd221b91c97246555c934692fac30bc25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-522 Malicious code in wlwz-2312-3901 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81581a49eae6a786226b0382a1502d12408b75ef25ae916cce4b8e981e3d02a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TRST-M-8 from previous audit still present

Lines of code Vulnerability details Proof of Concept TRST-M-8 from previous audit describes the fact, that when repaying is paused, then pool still continue accruing interests. Usually this is not considered as a medium bug anymore. However, protocol team has stated, that they have fixed...

Malicious code in techouvot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81e92cd0380e0b73b5c2ffb13126f2d7afccf95c07ee913368b10d98715bfd2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8663 Malicious code in port-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85da8cb996dc48738626c7874d7a4fedfcdbcb3294d0950ee6274abfaa54cc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How helpful are estimates about how much cyber attacks cost?

Coming from the newspaper and media industry, Im no stranger to wanting to write catchy headlines. Im certainly at fault for throwing together a story about so-and-sos house sold for X million dollars. But recently Ive been wondering if those "big numbers" for cybersecurity are helpful at all, ev...

Malicious code in @momo-miniapp/apix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 351e83f78d4df4b622201021ad8c9174b5816c9d1488ba1d409306c9353919d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Announcing the $12k NIST Elliptic Curves Seeds Bounty

The NIST elliptic curves that power much of modern cryptography were generated in the late '90s by hashing seeds provided by the NSA. How were the seeds generated? Rumor has it that they are in turn hashes of English sentences, but the person who picked them, Dr. Jerry Solinas, passed away in ear...

MAL-2023-8152 Malicious code in test-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f4a4a3a36da800a3c6e33fb47a4a42edf9ec19c39db7d5ea4e52a8fb378d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7950 Malicious code in discord.js-v12-lukyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f8bf74e566b2971105d1d8482b27bb35a3cd1aa60def4e10b9ae09a4397da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-eth-abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e13be402ee9d4db3c195949098b1f824dd7c443db3326421128b4d211aa41a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @leesiwoo/fca-horizon-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8dec25cc111a5b3b0146bc3b1436ce0a77fed1c784460a1be82ace48ed2ab4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-generic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebcee925a3db4677284b6cff8cc2c67b9f33a6a143ce355978379fd43b52a6d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-foreign-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19696b7c9cae056f89a8ebf29870be38468039ef7d123603c9c0e42048a08668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-684 Malicious code in planet-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55386c885b05d1c8fddc851d72b04df02d46b08a4b860a7038aa75f6ff8231c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-23262 · Snap One · Snap One Ovrc

Name of the Vulnerable Software and Affected Versions: Snap One OvrC affected versions not specified Description: The issue concerns Snap One OvrC cloud servers, where an attacker can exploit a route to bypass requirements and claim devices outright. No information is provided about the estimated...