Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years

The malicious Python package "Fabrice" on PyPI mimics the "Fabric" library to steal AWS credentials, affecting thousands. Learn how…...

Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

MAL-2024-11611 Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

RHEL 8 : python39:3.9 (RHSA-2024:8977)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8977 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

CVE-2024-51751 Arbitrary file read with File and UploadButton components in Gradio

Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary file...

Malicious code in pyyal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 85587f160dc4e7bcc19305fd294a77bf8256a3efb5e70b8ec84c94994edfb2a5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in mnolith (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 207bbf082f73c1f6a049ee32f8cc0c74e31ea20c858caf879db53107132b9c4d A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in control4d-multiview (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 321b180fa280d3e3b92106f3a20c69267ee789a4966b78905b1588d17552d935 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in distpro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 de27f9cd4056d9690ff7216c49b592b22c4059955b71708cf12783c072da64da A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in raylink (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0613226708c4c024ae1a37260c710abacbdc1b58cf53952873e39d134bb4c3a7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in netobs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 14480b5317baa8a903d35907265eac5d1e36af264c893920ac52fff04a106359 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in type-extension (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d68be7ebeb4e06c6e29be15274785ff085ea469d680f831c9d40a4dc3b54e8c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in service-affinity-scheduling (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 68be996c62ae54a32b5613110a7d66dcd40d443ca8fc6e8e869731be7ff40833 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in compresai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eff61bf37f16806690cbf9520f29f4e65c1619fb07bf01ccbb8c3c830f501736 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in portrait-mode-video (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a190c4d5edfd5b62c66980ec343cc41b020860de69839b9e8507217d00630bd8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in aslmutetion (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c052a3699080e1fef9f2799c9b4bd850eedd75f5fca1a3ea0dce97607fce9e49 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in mvdream-threestudio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 609ae3c19c5da8545336e0466e565db2d2ff6590b1a3bc1a089f3614344969b8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in fantasia3d (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f10f9afba1ef30b6953feb1080d6bb4df24f967023631cf9d577e974ddb3d412 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in pytorch-lighting (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62c64e574f5ad4d75ebc2c82d4cc48edb6185486f8379bfd2a7bd330ce94f50e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...