MAL-2023-8591 Malicious code in pywool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1ba602a97accda8e614fcf38d1af1cb7f1878bf2bd450b21f1be16a4c260123a Malicious packages campaign targeting developers, payload is hidden using Steganography, exfiltrate host information...

MAL-2023-1410 Malicious code in spammingsynonym (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97a0609c600ca9bc940340f2595fb41607b5af5c3931f10350bea6aa3c9879ae The OpenSSF Package Analysis project identified 'spammingsynonym' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1411 Malicious code in spammingsynonyms (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b06c2a9bef8741ecd851e448b284d8c0eef63b726a77662a1e4f3aec34119f80 The OpenSSF Package Analysis project identified 'spammingsynonyms' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1367 Malicious code in httprequesting (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb5f0b4d8a20b23a261bca2323ce8fbbbea6f868f64ab6aa260be08dd59ee6e7 The OpenSSF Package Analysis project identified 'httprequesting' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1409 Malicious code in smsobfuscate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa2efc28ecdebc90e41edd50503e199984f68d05cb13edab8b6e8d503d18e75c The OpenSSF Package Analysis project identified 'smsobfuscate' @ 1.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1368 Malicious code in iiris-new (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 402b426bbd1aa99236a63b04eea18d9cf2d9a61b6be5a6b3baefd87dd4f1cc32 The OpenSSF Package Analysis project identified 'iiris-new' @ 2.0.16 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1419 Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...

MAL-2023-6525 Malicious code in selfpyintpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13bec999a49bf9dee37e242115164d05756af19ea57d26d0b54b4c67c1f01571 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5975 Malicious code in selfcontrolloadload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 91681b7a493590b12a07e21ace57fdd2de85ae9dc23ca4f31d3b60c6a8ec1b9d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5233 Malicious code in py-intellibint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c51243b24c705c8e86f895cf56a4aaf31db49b64674882dbef77513f1bc075dc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2868 Malicious code in esqgameencodereplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a52a247b3876e80074ffdc24a1731191f9a280dcccbba73c0090e5f2aeac4ac2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-1375 Malicious code in libtpu-nightly (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4710fdb2d58063f6a640883c2617fc154d074a9122c261111dd2e2b10a1e9552 The OpenSSF Package Analysis project identified 'libtpu-nightly' @ 0.1.dev20230207 pypi as malicious. It is considered malicious because: - The...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in cryptography

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of cryptography. Vulnerability Details CVEID:CVE-2023-23931 DESCRIPTION: PyPI cryptography package could allow a remote attacker to bypass security restrictions, caused by a memory corruption in...

MAL-2023-8 Malicious code in kangpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11daf46221ff00d16c0c8784b95eba32196bb8f5543e2d3115c2b1826215c612 The OpenSSF Package Analysis project identified 'kangpy' @ 1.0 pypi as malicious. It is considered malicious because: - The package communicates...

MAL-2023-1422 Malicious code in yc-as-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9df89f5f0260f38e93635cc5df99e7ea267d4c07f25e1446a49c08fdf21befe7 The OpenSSF Package Analysis project identified 'yc-as-client' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1404 Malicious code in roblopython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62fff9aab2ab176cbb2e29cca29b5592fe22be3c0f020fa57bd4a931af0a40f7 The OpenSSF Package Analysis project identified 'roblopython' @ 2.0.15 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1408 Malicious code in service-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 851b9d051bac830771e87d8acb0857e1bb20dcf8f3fad2af78ca8785cda4d668 The OpenSSF Package Analysis project identified 'service-etl' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1418 Malicious code in taxi-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee43ff79927a680e9108ebd7b3f0a932760beedbf583a5681c2732568e362b6f The OpenSSF Package Analysis project identified 'taxi-etl' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1363 Malicious code in dmp-suite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 519dd07a618b2ba0671d86ef8fa2155f33aeaacdeed9a41d7f2e5257fb737aac The OpenSSF Package Analysis project identified 'dmp-suite' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1364 Malicious code in example-package-taxi-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc9af8fd35e3ce951b8d314b087c20afbd1ed1eeb3ff9441b0ea5d5ac5576e5a The OpenSSF Package Analysis project identified 'example-package-taxi-etl' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...