MAL-2024-9953 Malicious code in bughunter9 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9950 Malicious code in blypack (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9946 Malicious code in atomicdecoderss (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9945 Malicious code in atomicdecoders (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in artifact-lab-3-package-e90915e1 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9942 Malicious code in artifact-lab-3-package-e90915e1 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9936 Malicious code in aiogt (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-12301 Malicious code in lwplugin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c6d463791b2f4dc4cdb8a0b3961dbb9b956fc3f0e0ad974fc407211ae9d2e3a8 The attached DLL is infected with a very high detection rate --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2024-11627 Malicious code in luna-paysure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d22eccc425ab8fc5afe244efb33dd6d500ea6bcdf0942a02dedb3daa9f17da51 Importing the module causes exfiltrating of IP and hostname. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

Malicious Package

Overview browser-cookies3 is a malicious package. This package contains a malicious code and uses "typosquatting" to bait unaware users to install it. Remediation Avoid using all malicious instances of the browser-cookies3 package. References - Security Blog Credit: Kirill Boychenko...

django-blocklist (>=2.7.0 <=2.8.0), django-etf-api (=0.1.0) +12 more potentially affected by CVE-2024-45231 via django (>=5.1.0 <=5.1.0rc1)

django PYPI version =5.1.0, =2.7.0, =1.0.3, =0.6.2, =5.1.0, =0.2.30, =1.0.0, =0.3.19, =0.1.1, =0.91.0, =2.6.0b0, =2.6.0b2 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

django-blocklist (>=2.7.0 <=2.8.0), django-etf-api (=0.1.0) +12 more potentially affected by CVE-2024-45230 via django (>=5.1.0 <=5.1.0rc1)

django PYPI version =5.1.0, =2.7.0, =1.0.3, =0.6.2, =5.1.0, =0.2.30, =1.0.0, =0.3.19, =0.1.1, =0.91.0, =2.6.0b0, =2.6.0b2 Source cves: CVE-2024-45230 Source advisory: OSV:PYSEC-2024-102...

Malicious code in fake-usreagant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ef713dc551a4b2eb9b0c94b270f4c214aa90e688076e15bb263b3bb5f3b8484b Package imitates the legitimate fake-useragent, however it has a few suspicious additions: fake.py L149 calls a function from 'urllib2' module, which contains ...

MAL-2024-11740 Malicious code in user-random-agent-user (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 593686652ece19b8d2d79006659b8392c347442f9a8403ef1b9f8a8bfa232925 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11741 Malicious code in useregent-generator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0c8bbc66c2a8384b2a35340f4e3204351fbeb78d88a11bec270f8e3e52b5636 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11566 Malicious code in crypto-regex-gener (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3236b2ded0bd62e3958fa1c6257142248c46b75e64cdd0a90edd82ffba869335 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in user-gen-agent-random (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22f729ba6b5abecacd2d94214cf0075ac0729fb59d4e9cc1cf6287a2bf6e2ab6 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11565 Malicious code in crypto-regex-checker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a849790638e062a67e51026ebcd7d23b06a5cb901a1b74ce74bcf09762511538 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11517 Malicious code in agent-user-generate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 514af1dfd929068fabc7527812b99ec6a287c3601d7cf4ed1d29c55e74339fac Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11738 Malicious code in user-gen-agent-random (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22f729ba6b5abecacd2d94214cf0075ac0729fb59d4e9cc1cf6287a2bf6e2ab6 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...