MAL-2025-4223 Malicious code in mcp-xyz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4d411df043997ef0429e5915d45bcddf0e361d525c4f471e32c861e9a3553fd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11680 Malicious code in python-drgn-commons-metrics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 55b40b067506b72f76abb433795eb9f30b5568c235ded94d855ef08769887d92 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-9935 Malicious code in adafruit-imageload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e0e8ec25dd99d8d025b6caf7867a8f047bf68ee2cea72415e42435d9e000d212 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-5115 Malicious code in gwpythonsectt1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e725c704d6886238676ace905f16e6ad90eb00884187b18e2225bc66bf3a51cd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4210 Malicious code in chosenrce18 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 254a6f89fa4e8c08d6ac8622c13f3aa2e4213b57587fa14db03b51e32e406f96 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11729 Malicious code in tomli-dzw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83d4c8f45a091092f6ceb10a4cb2934e805ac096f6f1c983c49245b5f4d47ee1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-5100 Malicious code in c8tks94kspjghtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9182e332ef5bf851522bb14086c5159f1c606fb90094722f856c87f36e382da7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-10023 Malicious code in evil-package (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6fe9e1f81afbcfb5f8f0d260af0434649c77b11d353d3264c7022e763767d43 --- Category: PENTEST - Packages with high confidence of being created for a pentest. Campaign: TEST-PACKAGES Reasons based on the campaign:...

MAL-2024-10112 Malicious code in pybanners (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 79f46da2dc3c934741de674c01635b94240ac249ba2d9cb9f7a89e0c8d80686a --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-blazesquad Reasons based on the campaign: - infosteal...

MAL-2024-10105 Malicious code in popeye-pip-v3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 940ada25d3157d4f88092627a5a8eedb98abf86933890ce13193d4878d2698ee --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, researc...

MAL-2024-10106 Malicious code in popeye-xyz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 583bf7b6e6437de01c7cb0cf1793e661cb0e344ba8a2235ecebc18a9bfd50a75 --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, researc...

MAL-2024-10031 Malicious code in gentorqkkh1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 23c1a7041a4424ef67ce4e182aee3ead70dc15aacd94d20d63b5f7028224d75c --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-10030 Malicious code in gentorqkkh (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6d9d057c596541a3467728f7e2fc38dd60f4ad166c64ef77db6edef26247277 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7840 Malicious code in testjsonn2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d75d52ae07c9c9e2e6b773f2806c66631dd764da793bac0559e65bc4d0e7f66 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7838 Malicious code in testjson3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 783bce620b6d82880784734f95e5e48217bdc056277d57781a45fb14b66bcb97 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7839 Malicious code in testjsonn1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Iraqi Hackers Exploit PyPI to Infiltrate Systems Through Python Packages

Python packages are being used to steal data from developers and companies. Learn about the extensive cybercriminal operation…...

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

Cybersecurity researchers said they discovered an accidentally leaked GitHub token that could have granted elevated access to the GitHub repositories of the Python language, Python Package Index PyPI, and the Python Software Foundation PSF. JFrog, which found the GitHub Personal Access Token, sai...

Malicious code in fasdghjkhjafsd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2384ead182322f38776720b4406ef7589305cdd61f49fa6ae98ae31288b447b2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-prices-txt-exfiltration Reasons based on the campaign...

MAL-2024-10125 Malicious code in pystlete (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e5d093c6ce26c2d62ba07cc7fc8e0a5441f9e58bfc62943f6032dad8abefde57 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-kiwi-infostealer Reasons based on the campaign: -...