10358 matches found
MAL-2024-10356 Malicious code in bytekafka-0-0-15 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4619fa745296f46998d4eb4e25a7f4841bdd8634ead366c63521d25abf739a7e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10357 Malicious code in bytekafka-0-15 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5080a4abcce26e927e9647316733cd5313eb9422fbdcd3f971e539e62f9ccfb2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10355 Malicious code in bytekafka (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 32c6550914bf83f03b46acf778161efaee327dd537aa2ce0b6fbc53584c854f4 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
curl_cffi bundles a version of libcurl affected by High Severity vulnerability
Summary curlcffi is potentially affected by High Severity vulnerability CVE-2023-38545 in libcurl=8.5, which is not affected by this issue...
GHSA-3VPC-4P9P-47HC curl_cffi bundles a version of libcurl affected by High Severity vulnerability
Summary curlcffi is potentially affected by High Severity vulnerability CVE-2023-38545 in libcurl=8.5, which is not affected by this issue...
MAL-2024-10241 Malicious code in youreallydontwantthispackage2131 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8bca93b1825c930118e85cc054305e6aef120080f8cc68233467eb6ee7b3ff1d Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...
MAL-2024-11662 Malicious code in pplgdfhuighsdfyisfdty2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b38f6d0da39d944ddde3bda8742a42099398148ad778fb06fe57e6a3274ea2e8 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...
MAL-2024-11663 Malicious code in pplgdfhuighsdfyisfgfd (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1b4e49a8011af86af7ac1b8cf4760295ddcf33d4b354139db3d92192e813dcc9 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...
MAL-2024-9408 Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3b948e846f1817c6c72336ef38aac1149d25e0e40dc903eef60f7af4f3625e1f According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
MAL-2024-11618 Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwfef (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 41b992b1717ae4c37710bfcb4b86d013ca8f3eb95dc9e06f47bdd813010db976 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwef (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f32453dbd5b2857fbf4766d0c1573b109be79c0013d276ecdfce38105c4580f9 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
MAL-2024-9409 Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwbdfsfef (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d91b80430038c8f338d63c0fdb59ffe1bf16f35b1885fcf8c197b70078f980bb According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
MAL-2024-11619 Malicious code in j5gnpuiwerbngpiutbgn0iutb0pfwef (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 51f6d35c5375794ab0e1fdb23c00c2a82ad0e3d9e5731031a652d9e3a8766a9a According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
MAL-2024-11617 Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwef (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f32453dbd5b2857fbf4766d0c1573b109be79c0013d276ecdfce38105c4580f9 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
MAL-2024-11600 Malicious code in ggghhhrrr (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 28a551f5605f075f623a22621731c74e18e92b9e3eafef6d876457301fbeee20 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
MAL-2024-9306 Malicious code in iufgbewroibgfowiebc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 06029514a813cf9b228f1be7c997bffc2510869a5f0130d6036fa63ee6ea2fbc According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
MAL-2024-10205 Malicious code in web3-py-tools (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10190 Malicious code in walletdecoders (PyPI)
--- -= Per source details. Do not edit below this line.=-...