Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "lr-utils-lib," attracted a total of 59 downloads...

Malicious code in tomli-dzw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83d4c8f45a091092f6ceb10a4cb2934e805ac096f6f1c983c49245b5f4d47ee1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in layoutspecs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e98f53933a358e241d85c8222bb5093b52de69083969fc55de49b5ecc023050 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in testresearchpackagedc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b9a3d67880a7182900acdd5dafdb79bff126438c5538693dbd27c0c0848b2fb3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in cmdb-worker-pckg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0039cc4672b957b253c70bf7a3d084574f8a10d21d6bc42d0fac2f2a3fd8400 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6511 Malicious code in globrex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 35b815ba5cd6fe5e0062bf9a9a7bc12b0c93111f374965a625df773e00f1e175 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-10895 Malicious code in some-random-package-33 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 56e2adbf4dfb01600fc7df2c4a270d862b1b575c7040142ae070c7bf990d671e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-945 Malicious code in mkdsli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 196d1c4dba825b894b1e9708968b33e8f49523a93caa4dd839a05e0637f1716b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-914 Malicious code in dependency133434fr43437 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9cc68a9f63c26e040592558af43d4f7ef6369cbf6623c8f2558fc490acfabb73 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4257 Malicious code in vfsrcetest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7df901b4edfbd807ba2046d52cb63fb5c952df8c0bb464d1faff3f3732680ffc Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6428 Malicious code in 0x000testqwe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4c1f4407cfafbdc3391f55d6b0c6c7344e0e87cfc42f7eb6dfdd9239a82433b7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11520 Malicious code in akh-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9e1af18204b91fa245349f10eea1049681afa1d91cb4dd21a81b7789a29a9333 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-944 Malicious code in masirkhan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b67e1d0a9f54f2ca44aa61ecdf60d0caaff8fa29810b95066efc78a5fd4de6d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11665 Malicious code in puffionerlolpo2131 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80a02e95092a88f93b35471d27c9b913bd00100f9d34aa5b97983a717f4ce740 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11624 Malicious code in layoutspecs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e98f53933a358e241d85c8222bb5093b52de69083969fc55de49b5ecc023050 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4222 Malicious code in kms-tls-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e211b150f40985e98e9911c5d367f46e7b32351137aece84e0ffc6cd0ab7ef31 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6566 Malicious code in piprce (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d83838279a89d5ade01981d993fcc70a555a562945268ccfc8f770a21910f55c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-2983 Malicious code in otc-metadata (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 75435783250226bc7f234b0f98e4fb2b9777254a2ddbe179800f61577f6308e0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6551 Malicious code in murkh1111 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 906d5f09d6b21967d1f368837e8208faaccf4d609537ad596c58dd76a5c93a8c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6580 Malicious code in rwimodeling (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4d5196b5b1d70996b551a78ddfb633a1dcdf4319c51f2ea14d6c7d2cb60a61f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...