MAL-2024-11537 Malicious code in blackamerxs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 50486a7fa5636706a3c90bf515f6664c6cbb11aa127f9b3e95d7b38cf89c80c8 If run, the code in the package exfiltrates all files from the current directory tree. --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

MAL-2024-11693 Malicious code in reverse4343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a90c21a3dc6b4091f1ccd6f17c99b1ec955954d2b78e93029e63c33f12ed3c7d The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11534 Malicious code in backwwi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 23f7db675ae2d9beeb90ac31070aeb2a2ca9902ae348f92b30f828c200cc3441 When importing the module, the obfuscated code downloads and runs a remote executable --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2024-10573 Malicious code in fabrice (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d1d6b36980b1999e5525b7490b4a430c21cb4f86493a11b76f34ae8c02bfc19c The PyPI package fabrice is a malicious package typosquatting the legitimate package fabric. The package is an info stealer primarily...

Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years

The malicious Python package "Fabrice" on PyPI mimics the "Fabric" library to steal AWS credentials, affecting thousands. Learn how…...

Malicious PyPI Package 'Fabrice' Found Stealing AWS Keys from Thousands of Developers

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI that has racked up thousands of downloads for over three years while stealthily exfiltrating developers' Amazon Web Services AWS credentials. The package in question is "fabrice," which typosquats a...

Malicious code in compressi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ade0c38afdca5e7d87d6c3ecf059ed4a65e27587be0bff2287cbf4aa3474b536 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in kera-preprocessing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 973d4eb03e9256234b20a9fd346a83f5ddced04587ffbf9a7b9762fbe15a1231 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10733 Malicious code in typing-extension (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a4f2379794c21a682400394b2df6d8b9e278128bf36a6c23dd342fec8bf332a5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11544 Malicious code in byted-flex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7c46f02d189ba471aba10b985193a2e0476f4f7f9f6e068ddf3fe79c2088ea1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10837 Malicious code in portrait-mode-video (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a190c4d5edfd5b62c66980ec343cc41b020860de69839b9e8507217d00630bd8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10452 Malicious code in hybrid-sd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4eda2147ea1298ff5478fd2930bbb036f0b939a970e6c5ee1e9897f451957bea A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11594 Malicious code in ferminet-with-ecp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ee00c3ebd9a9dd393b6184c63072d81baa2ae968a831319453996dcf03d47999 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10737 Malicious code in importlib-resource (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0fd6066b0541bd12a7a24cd00cf0cebdc0d82832ae6ead0c90db2589bf50e152 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10451 Malicious code in hllm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c984c02970a9295543df7e945c9aa0ab34b1102216b42ef189fa6d626274a00a A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11636 Malicious code in monlith (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c423d177eb7d657790fd0c5f11e9b9c477e1df45c19c5d798ba9ddec607129a9 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11643 Malicious code in mvdream-threestudio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 609ae3c19c5da8545336e0466e565db2d2ff6590b1a3bc1a089f3614344969b8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10582 Malicious code in ic-flows-platform (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7ddd18ddba219f2d0fe4c9bceab7e456d97d23dd4ba95b9cecd06bffecef2bef A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10735 Malicious code in controlnot-aux (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a99770ef01fb53c863387ed64967ab6ed42be0cf7c901573dcd472db6ae51091 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10448 Malicious code in decompopt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2ff4de2c6f71744da4762614ad0593338aaaef2896c69bc16a2d81d2faaca1f8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...