Malicious code in asmutation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80aeb8a67bf0cf7d8244a44b026096d182334b10391fc1df010f3e558fff27dc A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bytekafka0-0-15 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0f3f2cbd161379b1f474af51611780606cf694273c13d7f0db7bb3869f03de02 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in lightsuq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f6ce7b46ab3f9a1735a26721a9d90395d628a51728e33639116fd003574f03f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in nuest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b492bc7bd440cf222a12c711590d7035a901a290bea145c0df822b55e57c0ebb A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in nerst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac5aa6644938e09002e1da1848fe502aad6e6f7c7733210529238eacd6bfb5a0 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in baibitmf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8d93b26a0f284c5d1c8c947e71598235be7de5ec89c7da775b88d410436e33ae A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bebitmf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74b4aea64b0811889f65fa66cb611912e1ff91bb08f22d2e0b3b5c9b8a179a63 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in x2vml-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c0a24139221a012c1dcb193331f49469571c2400d49c53489603dd68b26698e6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in v2xlm-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7fbdd4767b759c720bb13db759299986734471ff1064c52f7d25110c8e9aa617 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in lightsequ (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 982a9ec66c32a78f5829a04aa08e2f9d29f03f317b6a69b6ae0cc1e2d8b02c17 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bytekafka-0-0-15 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4619fa745296f46998d4eb4e25a7f4841bdd8634ead366c63521d25abf739a7e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in lightseeq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d14d6932bfe1a879a7af0d37aa99c04a96678783d745e6587d5c95c39086e09 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

python311-3.11.10-3.1 on GA media (moderate)

python311-3.11.10-3.1 on GA media Announcement ID: openSUSE-SU-2024:14455-1 Rating: moderate Cross-References: CVE-2024-9287 CVSS scores: CVE-2024-9287 SUSE : 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H CVE-2024-9287 SUSE : 5.3...

Malicious Package

Overview youreallydontwantthispackage2131 is a malicious package. This library contains malicious code and was removed from the package manager PyPi Remediation Avoid using all malicious instances of the youreallydontwantthispackage2131 package...

SUSE SLES15 Security Update : uwsgi (SUSE-SU-2024:3853-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3853-1 advisory. - CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules bsc1222332 Tenable has extracted the preceding description block directly from the...

USN-7084-2: pip vulnerability

USN-7084-1 fixed vulnerability in urllib3. This update provides the corresponding update for the urllib3 module bundled into pip. Original advisory details: It was discovered that urllib3 didn't strip HTTP Proxy-Authorization header on cross-origin redirects. A remote attacker could possibly use...

bounded-prescience (0.0.3), chainer-chemistry (0.7.1) +21 more potentially affected by CVE-2024-48206 via chainer (>=6.0.0, <=7.8.1)

chainer PYPI version =6.0.0, =0.1.0, =0.2.0, =0.3.0, =0.0.1, =0.1.0, =0.6.1, =0.2.0, =0.6.0.post1, =1.3.1rc2, =2024.0.0, =2024.0.1 and more Source cves: CVE-2024-48206 Source advisory: SNYK:PYTHON-CHAINER-8340635...

Malicious code in kekiktaban (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80c5f1e8e195c782d87e63c2bfc7eac3febe17836c3d502594ea10524f97464e Obfuscated package containing multiple techniques detecting sandboxing and exfiltrating basic data to a telegram webhook, with a little other functionality ---...

MAL-2024-11620 Malicious code in kekiktaban (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80c5f1e8e195c782d87e63c2bfc7eac3febe17836c3d502594ea10524f97464e Obfuscated package containing multiple techniques detecting sandboxing and exfiltrating basic data to a telegram webhook, with a little other functionality ---...

Malicious code in pplgdfhuighsdfyisfdty (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6da12f1a169dc997d18e49311bb47be99e753dca10106e2bde591c0618268d1 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...