MAL-2023-3187 Malicious code in esqpeprandpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aea048ba013f7ce939059d9531409ed96c93631c646b24bd3ac9e6d2f3a6cb29 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4008 Malicious code in libgetrandram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 465402568d9df18b1201b8fd41997455a1166540f85ea58df9efd5b40dea5eac EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2942 Malicious code in esqhackedlgtbpip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bd6276a4e7765be4133f2dac570d7dff2ee5d840441edb46e0de688f805a7a05 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5206 Malicious code in py-hydraurlstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 47625e61f184c45d87c486e1758fc80d20257676c08d5b37a3ff8b2adf8e8e98 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7476 Malicious code in tppyrandomed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7ae4f35f4b62a39c439b16d5a81eb24398dc404bb527e2543e524bfc543da367 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6157 Malicious code in selfhackedrandomstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 811a0c7e542831dc79a6feacaa65b869da0612cc59e199c445b70aa4740b524f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfhackedrandomstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 811a0c7e542831dc79a6feacaa65b869da0612cc59e199c445b70aa4740b524f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3498 Malicious code in esqultraultrapong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2c98e404aabd0d77c45913d27a01083d5a5e8d129675ea047245bb4b3f943c47 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7664 Malicious code in tptoolpywgui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13ae482293b38eb9a03870f3e171704aa0f874d8bd2d844f29b891e26bee00f7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6779 Malicious code in selfvisapostosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 65632a60795874f3ac69e18fdc7eabac985b410def1a17a89ed25f0f5f4773bc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

A malicious Python package uploaded to the Python Package Index PyPI has been found to contain a fully-featured information stealer and remote access trojan. The package, named colourfool, was identified by Kroll's Cyber Threat Intelligence team, with the company calling the malware Colour-Blind...

MAL-2023-5170 Malicious code in py-hackedultratool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 683154729de593cbfc8208d40aa345d873fc343abf863e10d885962f3b13a1e7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3897 Malicious code in libccreplacemask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cb06c066cbc0157e238ca06eee3d2bb5b450290d53bb067f57221d7931efe0b1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6610 Malicious code in selfreplacetoolreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afa2837f01d52ea3608d81ca5f739c43e9b4707e5ff3f8219f51d2c27f3dc03 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4032 Malicious code in libguicraftcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 10b1c6c9618ba70f95433b25c4db3ac8a11dbff4b224e16fff486708b654ec6f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5787 Malicious code in py-vmpullinfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9240d22cfd9767c4da17abc2b05484039bb2c9e3e4d36aa5467a634f7d174a6c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6651 Malicious code in selfstrresuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 49803565eb7930c1be012ba3459247ea4b14d432a6e16c4ba5917e4e2f697856 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5518 Malicious code in py-pushpingload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 92d3a1c30172ae30ec5af9afddc967e08214d997da4fc4619ec8ffd9bbd050f4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4138 Malicious code in libkilledgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7309d7a56fe3f4d048da7ed2d69ea79e96435d3da3cd52434e2326c8ec184c1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6014 Malicious code in selfcvedpep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx faffc37b530acdb4e7a54c9082a078755846487d2a529f9e0aeb965b498666ee EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...