Malicious code in testmatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b5431754785c03f3cbfc9922a386a1a20f80efa1854a2414bc9f86dabeef42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5500 Malicious code in ps-cart-recovery (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2796fa288d4cdbb8c44fa760bce301d9f11d9f40f3707935733e2582b92244e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in communication-network-traversal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9644017375dc5e148ea3c57c8227a481169d1336d4ed3abeb0c2d09728a6c81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @igame/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8233e06196315116860caa0cf4397b101b5b88de85c44d6fb6263766a32df3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @huji/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ac49504cf847090e77175a7cb05a0c654368325396488ae6733f2e589bf8edd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in example-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9acfa49bc966fabab653f30edda5447ca4129ec52665880e6e61b5a904a90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2470 Malicious code in dig-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c176c48e859438f13c62cd8bdc00448ce481a0e839891da1ab3211df7d387bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-show (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 443ae5878aeef65b3fcccbbd8aabfd6f07127a425a1715c4d20269b72f288b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 917015e67d3524947bf6202269dd9d3b5ce19a12c03609c67b0c04073720abdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-241 Malicious code in @epc-infra/region-only-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03aeca5ad9dc6bebb0249d07c948fc2913ba7b25fdc41cea4a5c78c8bf672958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Top MSPs challenges in 2021

If one searches for ‘the top MSP challenges’ between 2017 and 2020, there are mainly five things that are more likely to emerge from the search results: adopting cloud-based solutions, sales margins, satisfying complex client’s needs, employee turnover, and the scalability of the IT security...

Malspam Campaign Milks Election Uncertainty

Threat actors have taken advantage of the ongoing uncertainty around the 2020 U.S. election to unleash a new malspam campaign aimed at spreading the Qbot trojan. Criminals behind Qbot resurfaced the day after the election with a wave of spam emails that attempt to lure victims with messages...

COVID-19 and Acedia

Note: This isnt my usual essay topic. Still, I want to put it on my blog. Six months into the pandemic with no end in sight, many of us have been feeling a sense of unease that goes beyond anxiety or distress. Its a nameless feeling that somehow makes it hard to go on with even the nice things we...

Malicious Package in yeoman-genrator

Version 2.0.2 of yoeman-generator contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a...

GHSA-HJ5W-XGW9-W4RJ Malicious Package in coinstrng

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in siganle

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

GHSA-QJ3G-WFR7-3CV7 Malicious Package in require-ports

Version 10.4.0 of require-ports contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a...

How COVID-19 Has Changed Business Cybersecurity Priorities Forever

For much of this year, IT professionals all over the globe have had their hands full, finding ways to help businesses cope with the fallout of the coronavirus COVID-19 pandemic. In many cases, it involved a rapid rollout of significant remote work infrastructure. That infrastructure was called in...

Podcast: Security Lessons Learned In Times of Uncertainty

Derek Manky With the coronavirus pandemic breaking out, and corporate workforces going remote, “uncertainty is a key word” for 2020, Derek Manky, Chief, Security Insights & Global Threat Alliances at Fortinet’s FortiGuard Labs, said. The uncertain times led to an outpouring of cybercriminal...

Business ID Theft Soars Amid COVID Closures

Identity thieves who specialize in running up unauthorized lines of credit in the names of small businesses are having a field day with all of the closures and economic uncertainty wrought by the COVID-19 pandemic, KrebsOnSecurity has learned. This story is about the victims of a particularly...