MAL-2024-10034 Malicious code in hello-world-package-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ee148c559a9993ef0660c9183434ff59d2f6430a126a5913ef9a8341b9014ff Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-6510 Malicious code in glob-to-regexp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ce8e1c3de8370811f29db098c2ca6d1fbd027017b5e29a9b540a3dbe8f58c704 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-6460 Malicious code in babel-preset-current-node-syntax (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 227436e7c8f26da0ff88db12bd9102d85f9f596cf495b6e9192c634d275a5686 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

New Supply Chain Attack “Revival Hijack” Risks Massive PyPI Takeovers

JFrog's cybersecurity researchers have identified a new PyPI attack technique called "Revival Hijack," which exploits package deletion policies. Over 22,000 packages are at risk, potentially impacting thousands of users. Stay informed!...

MAL-2024-11639 Malicious code in mumupatcher (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c629884f1972a86de285e5eda36f8ec8358c1b40d22922ad309a11174af5fca4 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-10144 Malicious code in pytrv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d2f680e10e34dddd65afc0a09e3bc0c05dfb8cbaa5f02f5f0eb6ece5848498f0 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11676 Malicious code in pysleek (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebcd258899197196fca41e03c7a6781f5087b42fd37c0276ae9a892bef8d4910 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-10027 Malicious code in ezauto (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4d5e63bafe0b12244a82ffbde9bcf5eaf32ba47034bcd84168efb7f9e2becf9a Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11604 Malicious code in hahahasillyxd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f43efeb00e7f4fc1fd008a187b98b8c8fee1cf25f30ee8723ce1080b5fa6a323 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11647 Malicious code in nezur (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b50feb48c96e1118a7a347159715ad52cef02efdc463783eb9edcc5f33b6bbad Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-9940 Malicious code in antibyfron (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b18b332b0269a1ac32574b6676f3c4a5d85c8bc7d64519987a8ad8d740038331 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-9948 Malicious code in automsg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a96ae8403b713d8dbe1fbb5e8a17e2e06d08740e459e90b03769d5dfc7da33d9 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pytskcheck (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 25d82b24b022549617724628ccd6d11da9cc713daffc187cc3531b5bf3ef07e8 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11626 Malicious code in lowui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4ff92d988d3a1a5ad5fcec02556f08824926948c8d12fc1dba370a99b5e4b70 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-10047 Malicious code in modeflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9499d9dbc7c99f3ef3720a91b51ebfe6e0eac051ca6110233f16a61c762c2b8d Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-10111 Malicious code in pyadd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67e5e3d0aff485ca2bf6f83151e1ecfae4a9b9335db657c72142ac9fd034250e Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11672 Malicious code in pydllcfg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94960ddaf12ee1269aaab9abf1893d320ae2ff50fbd17ff4773edab18e7e3a11 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-10157 Malicious code in rodll (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 371166aacf4728718533b433b86908bce1066651f8fb12d3b6a2685612218386 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-10180 Malicious code in uidesign (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f633bab69254c5eace9c9462c082253c39940828ec31ef84f44b8fce8cba04e6 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11581 Malicious code in embeds (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46ae6a18503196c40e7fd1759d8a68025e6a980a64821c2a1232b7f76fbc2779 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...