MAL-2024-9936 Malicious code in aiogt (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-12301 Malicious code in lwplugin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c6d463791b2f4dc4cdb8a0b3961dbb9b956fc3f0e0ad974fc407211ae9d2e3a8 The attached DLL is infected with a very high detection rate --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2024-11627 Malicious code in luna-paysure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d22eccc425ab8fc5afe244efb33dd6d500ea6bcdf0942a02dedb3daa9f17da51 Importing the module causes exfiltrating of IP and hostname. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

Malicious Package

Overview browser-cookies3 is a malicious package. This package contains a malicious code and uses "typosquatting" to bait unaware users to install it. Remediation Avoid using all malicious instances of the browser-cookies3 package. References - Security Blog Credit: Kirill Boychenko...

django-blocklist (>=2.7.0 <=2.8.0), django-etf-api (=0.1.0) +12 more potentially affected by CVE-2024-45231 via django (>=5.1.0 <=5.1.0rc1)

django PYPI version =5.1.0, =2.7.0, =1.0.3, =0.6.2, =5.1.0, =0.2.30, =1.0.0, =0.3.19, =0.1.1, =0.91.0, =2.6.0b0, =2.6.0b2 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

django-blocklist (>=2.7.0 <=2.8.0), django-etf-api (=0.1.0) +12 more potentially affected by CVE-2024-45230 via django (>=5.1.0 <=5.1.0rc1)

django PYPI version =5.1.0, =2.7.0, =1.0.3, =0.6.2, =5.1.0, =0.2.30, =1.0.0, =0.3.19, =0.1.1, =0.91.0, =2.6.0b0, =2.6.0b2 Source cves: CVE-2024-45230 Source advisory: OSV:PYSEC-2024-102...

Malicious code in fake-usreagant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ef713dc551a4b2eb9b0c94b270f4c214aa90e688076e15bb263b3bb5f3b8484b Package imitates the legitimate fake-useragent, however it has a few suspicious additions: fake.py L149 calls a function from 'urllib2' module, which contains ...

MAL-2024-11741 Malicious code in useregent-generator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0c8bbc66c2a8384b2a35340f4e3204351fbeb78d88a11bec270f8e3e52b5636 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11740 Malicious code in user-random-agent-user (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 593686652ece19b8d2d79006659b8392c347442f9a8403ef1b9f8a8bfa232925 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in user-gen-agent-random (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22f729ba6b5abecacd2d94214cf0075ac0729fb59d4e9cc1cf6287a2bf6e2ab6 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11566 Malicious code in crypto-regex-gener (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3236b2ded0bd62e3958fa1c6257142248c46b75e64cdd0a90edd82ffba869335 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11565 Malicious code in crypto-regex-checker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a849790638e062a67e51026ebcd7d23b06a5cb901a1b74ce74bcf09762511538 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11738 Malicious code in user-gen-agent-random (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22f729ba6b5abecacd2d94214cf0075ac0729fb59d4e9cc1cf6287a2bf6e2ab6 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11517 Malicious code in agent-user-generate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 514af1dfd929068fabc7527812b99ec6a287c3601d7cf4ed1d29c55e74339fac Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-9266 Malicious code in innostage (PyPI)

The package contains code to download and execute a reverse shell script. --- -= Per source details. Do not edit below this line.=- Source: kam193 ec433c9a241ed7127dc5d6f55b002e94a2407ddd47000e50355f118536e9021e When imported, the package download and runs a remote stage - a reverse shell. To mas...

MAL-2024-9268 Malicious code in maxpatrol (PyPI)

The package contains code to download and execute a reverse shell script. --- -= Per source details. Do not edit below this line.=- Source: kam193 e7b0664f3eb50be717290db2d08e1be4a3dcbce029ad58fae9cffb04f09a51c1 When imported, the package download and runs a remote stage - a reverse shell. To mas...

MAL-2024-9267 Malicious code in innostage-group (PyPI)

The package contains code to download and execute a reverse shell script. --- -= Per source details. Do not edit below this line.=- Source: kam193 9d0f2f6104de4772268a20f51e009797c0c4b0740d18d98d730417fdafdfb052 When imported, the package download and runs a remote stage - a reverse shell. To mas...

MAL-2024-9269 Malicious code in posi (PyPI)

The package contains code to download and execute a reverse shell script. --- -= Per source details. Do not edit below this line.=- Source: kam193 9eff1140edfe020fe3ef5905579f5e5d74a8cd0638332576041513ce894eb27e When imported, the package download and runs a remote stage - a reverse shell. To mas...

MAL-2024-11736 Malicious code in upllib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6207428c93f872f851e291726fc7a7384f9226b903c01a5a3f1545f82d66bf0b When importing the module and a specific file exists in the current directory, obfuscated code downloads and starts the next stage of obfuscated code cstealer...

MAL-2024-11584 Malicious code in exflibrary (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95deb938eb8fd38976a38faf2fd2117318966fc829c080f35d6d999ff37d1236 When importing the module and a specific file exists in the current directory, obfuscated code downloads and starts the next stage of obfuscated code cstealer...