Malicious code in astrono2mio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-1962 Malicious code in astrono2mio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-1963 Malicious code in astronomio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 083fa61d5e589b627ba6c1d6db2db22ef6df9cd06e6df5bda08120e2c65bb20d setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in updateuuid4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c45f904631a26aae94cafeeac5ea0f7efe0fc5d4f46dea48da17dcb766111d5 The package, with an innocent looking name, has as the only functionality reporting to a Telegram channel given username and password. The functionality is in...

OPENSUSE-SU-2025:14750-1 python311-3.11.11-3.1 on GA media

These are all security issues fixed in the python311-3.11.11-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14740-1 python311-cryptography-vectors-44.0.0-1.1 on GA media

These are all security issues fixed in the python311-cryptography-vectors-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in inkpy-jinja (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c230bd12491edc91bbbc1080b2d650c4889a8b9269b85a346839a32900bfad2b Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

Malicious code in nflx-metaflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d317c47382e978342b2098c06b1d0ff46acfefdc5a5ed6ce2b531b1f5b24fe4 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

MAL-2025-191766 Malicious code in inkpy-jinja (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c230bd12491edc91bbbc1080b2d650c4889a8b9269b85a346839a32900bfad2b Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

Malicious code in lightgboost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03aea882aa08832e53ccfb267fe4b95c9ea4f24ea51ceeaaa4a85557e67ce15b Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

Malicious code in pxz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2649e06884047fa82f596d9f9b0822080bff93b64a69a9a6090c0640f19ec656 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

MAL-2025-1984 Malicious code in nflx-metaflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d317c47382e978342b2098c06b1d0ff46acfefdc5a5ed6ce2b531b1f5b24fe4 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

MAL-2025-1986 Malicious code in pxz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2649e06884047fa82f596d9f9b0822080bff93b64a69a9a6090c0640f19ec656 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

Malicious code in hellohackers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63788f1f3223270be7955b619eb09fa7e7f401084e4332ed732d33b522782a37 File contains a metapreter beacon that runs in the setup.py. Analysed version uses a local IP as the target. --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1977 Malicious code in hellohackers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63788f1f3223270be7955b619eb09fa7e7f401084e4332ed732d33b522782a37 File contains a metapreter beacon that runs in the setup.py. Analysed version uses a local IP as the target. --- Category: MALICIOUS - The campaign has clearly...

python311-scikit-learn-1.6.1-1.1 on GA media (moderate)

python311-scikit-learn-1.6.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14729-1 Rating: moderate Cross-References: CVE-2020-28975 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

MAL-2025-1975 Malicious code in farooq4321 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 165ce280a6d073eebbba054677a6c80307c8353b31e41732ba1ffc1f8a020aa4 Code in setup.py attempts to call a webhook, but most importantly to execute a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, li...

Malicious code in farooq4321 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 165ce280a6d073eebbba054677a6c80307c8353b31e41732ba1ffc1f8a020aa4 Code in setup.py attempts to call a webhook, but most importantly to execute a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, li...

Malicious code in requests-x64 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 996690f6aae3ce7456b45309072e2b12f5afda24b2f58e7f66b004c1f2b99872 Code in setup.py attempts to silently download and execute an executable. The file contains a malware --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1992 Malicious code in requests-x64 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 996690f6aae3ce7456b45309072e2b12f5afda24b2f58e7f66b004c1f2b99872 Code in setup.py attempts to silently download and execute an executable. The file contains a malware --- Category: MALICIOUS - The campaign has clearly...