Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

A malicious Python package uploaded to the Python Package Index PyPI has been found to contain a fully-featured information stealer and remote access trojan. The package, named colourfool , was identified by Kroll's Cyber Threat Intelligence team, with the company calling the malware Colour-Blind...

CVE-2023-24329

A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity...

Malicious code in py-hackedultratool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 683154729de593cbfc8208d40aa345d873fc343abf863e10d885962f3b13a1e7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfreplacetoolreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afa2837f01d52ea3608d81ca5f739c43e9b4707e5ff3f8219f51d2c27f3dc03 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libguicraftcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 10b1c6c9618ba70f95433b25c4db3ac8a11dbff4b224e16fff486708b654ec6f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfcvedpep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx faffc37b530acdb4e7a54c9082a078755846487d2a529f9e0aeb965b498666ee EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in librandomintelgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9c2b6fb72b006b45cdb0e67dea5bf29e1295782fd52e0cf0aa80313bdb43bf8f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpiposintmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b15e152c7f52a0a11b9047344ce98edb9f7d791675de08cbd77b29e1f06c5e01 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqvisastred (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 38da1704b225a9e7e330990b5c052419bf41e5d10da15b756799e741b912d299 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqtoolvisaram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c96f70a121a08fa5e02be5a893c229900a5baa973a6bf212ca7d42e0e62a8e65 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqosinthackedstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0cafa12b67db2bbad0f0fc52b6bfaade72be8319eee2b794aa10498757d4da37 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpstudystringpep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 33dc8dd08e3b1df3e8048741363dee922fed9a8c6c1028c035a9f914e4e079f6 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppushvmgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96c8cf2f968b45c647c32d2dc65de5b1550ae52555dfadf4c35151afaefc1d5a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfcandyhttpnvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ed97bf014c9d4e0b72e81b21f933a17f02a7af22c3adc125e0eabf5a4bfb2f6d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpullurlcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx edab3edc06b209aa1bbec0f7e1fc7ae8f0a03b9b53bbc5d74f1cbd1aec12bf8c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqnvidiapaypalmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cfc5dfae5c2a0cf884394ec5c67fd0e6974c51bc6a32941045589410690ebbbd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libintproofpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c0fcac9045fe269c09e791536cfc6b73ca4b384599fa6344168d34f113af3beb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libstrpushkill (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 900576d8efa522a18c756e77ed71803365bc206b9114628cd97a798692b884d2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqverinfostr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0c51dea8c6d91232d51933dc269a380fc9709ded1f24048627113a47b3500c5d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libvisacvcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx af403b5f4c64465effdccd8f2de7df6ee25077e67bf17ad22aed61900ad0d0aa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...