Lucene search

K

GoogleOSV:MAL-2023-7800

HistoryFeb 23, 2023 - 7:00 p.m.

Malicious code in urlultra (pypi)

2023-02-2319:00:14

Google

osv.dev

4

pypi

urlultra

spyware

information-stealing malware

7.2 High

AI Score

Confidence

Low

-= Per source details. Do not edit below this line.=-

Source: checkmarx (3c7b155fedf43e93b99c014649b35e6cee427625d86cb5c8fe57497b36942ad4)

EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware

References

medium.com/checkmarx-security/the-skeleton-squad-tracing-the-origins-and-scope-of-5000-malicious-packages-on-pypi-7516c16e4da9

7.2 High

AI Score

Confidence

Low