Malicious code in esqosintgetsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c67d60cc167550cc06c7515a3e60656b4edd9404e0e6274137d943a57e80822d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqcandyosintsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d70863f48c57c0990c9b746d39dfc5001bc3c274272d4b3e0480756f4eb3401e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqcontrolpongpull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c20d59a5eee32762e395049b9d8b056396a316b0e54213c44f9c0d7a5de02754 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libguipushload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ce9ae4dbfe29f204d92fb36bbe59357b2d3d64a4d9fc46421c8032dbd7e453b0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libguiposthacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8353150c4c96663c9a5a31f71138b99240192fe9e4d5779a362bdc30d9f0fe4d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-killlibrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e08b6b963af7041c11678961b1c5ed99e417d0ba950388941153b0f13dc8bd62 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqintelpipstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 23cec2663eece3a58575cf65cafd1b073bd4b9283afec6b5c148f41097883947 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfinfolibtool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 42bbc2883e4428a8f09948962b5152bc4178cdf030edb293fde8e12a3b2603de EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-pinggrandnvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5d42cd7a1ed96e20b48603ce30e9b30b46e07b45b7f2a2a898a19a486a129a74 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqpycraftpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6a603cf288520ea30f3f82613af7c2ab5ac6a264df85fe0a5b92b61a0e409c96 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libsplitminecraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b89dcdf991a28bfc9cd96823b61e05becd2d8f2eda95969c301fa14ff49a7cb1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppaypalcandypost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5cdf93eed7bb5209b93d1d574818a7e22006418f749a90d83d7eb52e25519147 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqosintintver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d59f3d6daf1128f4f3fcb59b7e8909d4992d0b9ec64a7299acf4af8c1662198a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpcvmcpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2da96abb3c7b9670c12cd840aea3dbb98cb702d54b87b2a761ae9b6d8275722a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-adrehacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c03ffa3bf9ea4700ce39b42d3bd784516841ee5259c9f5f0dff4d43611f723f0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqstrsplitmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05b600bd6debed3817b65a67771f83bcba11cad9982ad130b1737c3f9ad0e91a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpkillpywcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1b45639842c8db8334986db760840d3ad8c964e7fb65146a9dd1ff9553811739 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfvisacpuhydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cdbab4dc3cc450ba521b8f72fc08cd80e323a77e3f7002f9781db21c33809d37 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqlgtbguistr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 03e05eee9d71ba1e87c875c37a4d12eb52e07296554bf0ef2619143ac5e647ef EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

A week in security (February 20 - 26)

Last week on Malwarebytes Labs: GoAnywhere zero-day opened door to Clop ransomware Chip company loses $250m after ransomware hits supply chain GoDaddy says it's a victim of multi-year cyberattack campaign Twitter and two-factor authentication: What's changing? How to set up two-factor...