MAL-2024-12353 Malicious code in subsys-counter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5aa9a3a8888bf731b171ad413a70076df1eff7c362d520f6f3457057aa615f7 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

Malicious code in subsys-counter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5aa9a3a8888bf731b171ad413a70076df1eff7c362d520f6f3457057aa615f7 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

Malicious code in kmvn-ekjvnbwkhjbewv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7bdb5dbe3c34fefec0edf3fec374c428af88d2600073a8db94054e7feb101fa Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

MAL-2024-12367 Malicious code in ttat-api-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d20a1138316e89f4d0fa408c74d2aadafbb6d6c62a1bfb5fdececb77409aadd4 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

MAL-2024-12210 Malicious code in audit-themis-i18n (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 37f93a88c028e5f97cf3f81fbfea413f78a01ea84f108247d6d5abf926f0dd73 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

openSUSE Security Advisory (SUSE-SU-2024:1864-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:1855-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in thethreadingassistant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 762eff7d2ce4176f6050d35736ba93b5853e8519e760522372aced785a146e59 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

Malicious code in assistant-threader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6dba125172b57e6b24bcd2cc0df076483e1fe36d1969f37e533d611fb6f9d808 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

MAL-2024-12209 Malicious code in assisting-threading (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 33605e5f943eacd5d5ab7a4c37625226e2ef072f2fd3dac068b169d58ba1c2c9 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

MAL-2024-12363 Malicious code in threading-assistant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7b431362a8fc3af245e62278011eb007f0b23eeaa959c3a34bbb959fa549a4c Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

Malicious code in uconst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cc4ce4d1709ad506513007356fd414ca83c1aa848f9134e952c4b760194428c6 Package "uconst" is the package containing malicious code with multiple stage, exfiltrating basic info as well as browser data. It's put into others as...

Malicious code in aiotrans (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3bd64da5911ab6ec28e1bc33993b363b52702ff6bb19a87b98f37267d0784664 Package "uconst" is the package containing malicious code with multiple stage, exfiltrating basic info as well as browser data. It's put into others as...

Malicious code in audio-separator-fork (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c2fdb66a75c58bc11250d088e141d39a4d2bbf8be018db9bb0ca9fd219d7e257 Clones real package and hoddens an obfuscated code trying to run remote scripts as well as establish backdoor through SSH. --- Category: MALICIOUS - The campai...

Malicious code in artifact-lab-3-package-3eef6c2c (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2325acb67ca59e847fd003a5449350d2b0b12620ed80cb82cc6189f091bdacc7 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-02f73e0e (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ce38f402ec2ebebcc95e82007ff5807caab91173d1823fe9aa89db982083701e Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-2387cbf7 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7acac602c6445456648e5d2df157f8b6085f8fb7fa4f001ec1d9fffd97da3294 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-76a351f5 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ffd940df08afab8ca93f472de627c4cc633b5de2d3331b58a84602a882390ac1 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-7e532784 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d93531e3b6c6c54a9029303ec3f20394fe8268775978e1b13754c318486c88cc Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-3ccf47e8 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7239a7e420a096b7396ccc6e482472827791876070b026e5126d694e4a548920 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...