101 matches found
MAL-2024-11560 Malicious code in colotama (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 fa7312f48aedc863c1eb3377178692b7cb1fe1503114d3cbc6cdc97572b9a6c0 The pyprettifier library has a feature to send out the user home path throuh the logger. It's attached to the init of EmojiConverter class. Other related...
Google Fixes GCP Composer Flaw That Could've Led to Remote Code Execution
A now-patched critical security flaw impacting Google Cloud Platform GCP Composer could have been exploited to achieve remote code execution on cloud servers by means of a supply chain attack technique called dependency confusion. The vulnerability has been codenamed CloudImposer by Tenable...
MAL-2024-11608 Malicious code in http-query (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f19b11d590534cc47f47b9fc60fae3affd054b1f5dc720dbbc17147cc7095653 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
MAL-2024-11581 Malicious code in embeds (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 46ae6a18503196c40e7fd1759d8a68025e6a980a64821c2a1232b7f76fbc2779 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...
MAL-2024-11629 Malicious code in malware-test-pack-new (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d42920cb02fcba93dae29713be0c3e00b0b63c4d6b54a0370d069cb7c246e957 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
MAL-2024-11607 Malicious code in hellopythopyy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4d534cccb22ee1d1a160d632f8698201e94ea1c69129838084362bd42c52a9a9 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
MAL-2024-11746 Malicious code in voto3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 34f516638c010eaffd4b7bf199d71925e9963e438cd619739347a6d0ac4bb6be Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11556 Malicious code in check-codeowners (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 946e4f02e3bc9fafb3561655eaaf71128a7a37469e09460b0b9f3f204e850185 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11624 Malicious code in layoutspecs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e98f53933a358e241d85c8222bb5093b52de69083969fc55de49b5ecc023050 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11714 Malicious code in stackstorm-runner-action-chain (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0cc9e6be890f15ba83b67af002dc0fdec59a68ebdd2696ab5168df443ed2dabf Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11703 Malicious code in security-automation-job (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 38eb272538ac306cb26b84b3887bf6fd77f00fe00e64a10814f34258702eb442 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11656 Malicious code in pd-py-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a736772e9e597e421d82f4148fe6b608acb28b363db608096df90e782cce4af7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in aiopbotocore (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d8d91c12a2d06f8bcdfe81cb5dde81548bff052f937e29424eb0e2fee1aa9074 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11715 Malicious code in sumo-py-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6ed9233fda861428b541d5a3188300bb67c877f6998c43e808dc5910b7113b4d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11702 Malicious code in search-python-common (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0c88a2aa7e382781b4c0032b273e3e772875f1e3cbd8e22569c90d1d3ebf9198 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11683 Malicious code in python-drgn-commons-spark (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c5207bd91c5eab8a2ae9cda76c18027e600cbf015d01884048da00371577b3d1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-4256 Malicious code in vfsrce18 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e469759fd14d2b1207e5da1f724c19e6dc6b2896feaf658ad78c4ad33e3748de Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11519 Malicious code in aiopbotocore (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d8d91c12a2d06f8bcdfe81cb5dde81548bff052f937e29424eb0e2fee1aa9074 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11678 Malicious code in python-drgn-commons-all (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3ce33648003ab87b87342b026af5cbeb8d8f3f759af0f8c7ae3557a104ec3546 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...