10354 matches found
Malicious code in jsonist (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4c74a199a696dbc18994242bc3c29e9a018ddda51fa2bbe224620d9ded6f1818 Calling a method starts downloading and starting an infostealer script --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in titifel-pypi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 246211906386c6795c3728d15bf42f5b9083257d1964d8dc21bcda833dd6363c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-47804 Malicious code in titifel-pypi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 246211906386c6795c3728d15bf42f5b9083257d1964d8dc21bcda833dd6363c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
PT-2025-32302
Name of the Vulnerable Software and Affected Versions uv versions 0.8.5 and earlier Description uv is a Python package and project manager written in Rust. Versions 0.8.5 and earlier handled remote ZIP archives in a streamwise fashion without reconciling file entries against the archive’s central...
MAL-2025-191690 Malicious code in bh-25-req-ase (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ddd759ada90b89401904e23b4e8cbe6a3021baf3c34495150b4a713ca7063be0 If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...
Malicious code in thisisthedaventestz (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d5f510bfda1aeb6999f77b06597e760e13d4058dab2a7f8620bf8c561db5d39c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6794 Malicious code in num2words (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a528edd10eb63e7c7932830fdb314983cadc840ce8ccfbaa04ad821bbdc1da The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions...
num2words subjected to phishing attack, two versions published containing malware
The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions have been removed from PyPI, and users are advised to remove the affected versions from their environments...
GHSA-JXR6-QRXX-2PH2 num2words subjected to phishing attack, two versions published containing malware
The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions have been removed from PyPI, and users are advised to remove the affected versions from their environments...
MAL-2025-6626 Malicious code in zlsrc (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6625 Malicious code in zlapp (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6612 Malicious code in utils-wallet (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6611 Malicious code in tulipgui-python (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6602 Malicious code in torchao-nightly (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6601 Malicious code in thoughtspot-rest-api-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6599 Malicious code in terraform-binary-wheel (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6595 Malicious code in spokeoapi (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6593 Malicious code in spl-transpiler (PyPI)
--- -= Per source details. Do not edit below this line.=-...