Malicious code in pygments-richstyle (PyPI)

Source: kam193 a965f61b1e51e6c96a8987633eaf2f23001320e4c6b884c33603230c66798e74 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...

Malicious code in postgresql-connector-python (PyPI)

Source: kam193 87f55ac62324b5fc631b711e125f897d8ae10d06a9d80173463d9a5fa1915302 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in pantheon-toolsets (PyPI)

Source: amazon-inspector a3f2d24843d0caf23a36f07f7bd7b3adb7163463404856654f1745c7e75017be The wheel installs pantheontoolsets-setup.pth, which Python automatically executes at every interpreter startup before any user import. The.pth contains a single obfuscated line using single-letter...

Malicious code in pantheon-agents (PyPI)

Source: amazon-inspector 1ee06d7aabbdf76969119c2f986e18bbc7f0dcac59ae9cae4f7a04798f2d083d The package installs pantheonagents-setup.pth into site-packages, which Python auto-executes at every interpreter startup broader than import-time, fires on any python invocation regardless of whether the...

Malicious code in optext-python (PyPI)

--- Credit: OpenSSF source...

Malicious code in openai-mcp (PyPI)

Source: amazon-inspector 6c30f8b1a160c72529e2671b81be13ea671302e9bc3915ee84bd2212e0fdd5a3 The package name and module structure impersonate the official openai Python SDK the package even rewrites exported classes' module attribute to "openai" in openaimcp/init.py. Alongside the cloned SDK, it...

Malicious code in okite (PyPI)

Source: amazon-inspector 3cc7d54b0e30e24367551e3f19ab7387cf397cf9e1b5889c9f04ff871c771c38 The package installs okite-setup.pth, which Python auto-loads on every interpreter start. The.pth file contains a one-line obfuscated exec of a string program variables reduced to one- and two-character name...

Malicious code in mymaldependency (PyPI)

Source: amazon-inspector 38372ffa2ec19cee68f769508d95ffb4f5c1878aeae058ce3e7a33b947d06cf1 MyMalDependencypackage/init.py executes on every import: it calls os.uname and os.getcwd, writes the results to./trans.txt in the installer's working directory, then invokes os.system'scp trans.txt...

Malicious code in moxel-python-driver (PyPI)

--- Credit: OpenSSF source...

Malicious code in logging-python (PyPI)

--- Credit: OpenSSF source...

Malicious code in langchain-core-mcp (PyPI)

Source: amazon-inspector bd42d83950d8d8fc559905eed104af38cd6c8aef683b96778f0b8d778dd6bd5a Package langchain-core-mcp impersonates the legitimate langchain-core publisher: METADATA sets Project-URL Repository to https://github.com/langchain-ai/langchain and reproduces the upstream README/descripti...

Malicious code in httpserver-cache (PyPI)

Source: kam193 f48fad5068e7bfd86223ca6ef2fbf939ae684f2a4ae499f15f9cbe1e0cd9144d Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...

Malicious code in horde-python-client (PyPI)

Source: amazon-inspector f2ae9afcd7af22c82b137c1142ae643502d82f3d1f28712b2e5c7ec412bea85e horde-python-client 99999.0.0 is a dependency-confusion lure. On import hordepythonclient, a daemon thread unconditionally POSTs a JSON payload containing the host's hostname, the USER/USERNAME environment...

Malicious code in googleapis-googleapis-grpc-python (PyPI)

Source: kam193 0173c52d763cfc2d6f3c0222ad82887aa50ee181e8cfe807aa700d34cc54fb45 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in gpsea (PyPI)

The package gpsea version 0.9.14 contains a malicious .pth file gpsea-setup.pth that executes a Bun-based credential stealer on every Python startup via CPython's site.py exec mechanism. The payload downloads the Bun runtime from the official GitHub release page, then runs an obfuscated JavaScrip...

Malicious code in flatfox-api-python (PyPI)

Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in fluent-dashboard-panel-metrics (PyPI)

Source: amazon-inspector 9e745c609fb43daaa93911ae2edcb05b1ffd3cec1c6ec55c321597e9e39eb153 fluentpanelmetrics/init.py defines an undocumented function bootstrapruntimeprofile and invokes it unconditionally at module top level. The function opens a TCP socket to 34.69.137.236 on port 80/443,...

Malicious code in filesystem-python (PyPI)

--- Credit: OpenSSF source...

Malicious code in faker-python (PyPI)

Source: kam193 2d88bf5533b182da36c514791c3e6841d83565d4d7f7065a09cdebddc2509453 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in executor-engine (PyPI)

Source: amazon-inspector 7fee580000475783e657a2e66ca6a4a4bd4369aa0bc9f87152b003dca6f34848 executor-engine 0.3.4 ships a malicious site-packages.pth file executorengine-setup.pth that Python's site initialization auto-executes on every interpreter start after installation. The.pth contains a neste...