MAL-2024-7839 Malicious code in testjsonn1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Iraqi Hackers Exploit PyPI to Infiltrate Systems Through Python Packages

Python packages are being used to steal data from developers and companies. Learn about the extensive cybercriminal operation…...

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

Cybersecurity researchers said they discovered an accidentally leaked GitHub token that could have granted elevated access to the GitHub repositories of the Python language, Python Package Index PyPI, and the Python Software Foundation PSF. JFrog, which found the GitHub Personal Access Token, sai...

Malicious code in fasdghjkhjafsd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2384ead182322f38776720b4406ef7589305cdd61f49fa6ae98ae31288b447b2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-prices-txt-exfiltration Reasons based on the campaign...

MAL-2024-10125 Malicious code in pystlete (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e5d093c6ce26c2d62ba07cc7fc8e0a5441f9e58bfc62943f6032dad8abefde57 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-kiwi-infostealer Reasons based on the campaign: -...

Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories

Unknown threat actors have been found propagating trojanized versions of jQuery on npm, GitHub, and jsDelivr in what appears to be an instance of a "complex and persistent" supply chain attack. "This attack stands out due to the high variability across packages," Phylum said in an analysis...

MAL-2024-9949 Malicious code in better-gradient (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 61ee3d2a1011f83d233eed4719b397bc9a4e69c449841335b187b323d9f980fc --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: duvet-love-odyssey Reasons based on the campaign: - infosteal...

MAL-2024-10133 Malicious code in python-guild (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e80e97d90a6fe86d94b3d80feac7f7f53e0eb1ee29320ebb7612cdf7a5449f3d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

MAL-2024-10161 Malicious code in sol-structs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6d466f5d94859498aa97e45fc82060c447a3004b4ea16e620a3fcc58ed8cfb3e --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

MAL-2024-12349 Malicious code in spl-types (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62ae4c4e03f2865a43a463427c66b7131a5c981b645d24d246d93435347e5819 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

MAL-2024-10172 Malicious code in text-adventure-game (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d130695c8c001b5c9dcdb269da4709b4b1d6f75407f319a7ed709f2370212fdd --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: text-adventure-game-ch-2024-07 Reasons based on the campaign:...

MAL-2024-10220 Malicious code in zlibxjson (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7066166aef73a74278d8bf23450a89f6a42d22c8fac20660bc5275868b92d211 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: zlibxjson-discord-cookies Reasons based on the campaign: -...

Malicious code in bussardweg4av3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ce407c0de96eb20cc6cb45203675e913575a71f8c1b64604964e9a43d9d5809e --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-10188 Malicious code in w3b-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bd8f518df8aff7869e1bbf6cfd02e1f9c6b58eb38525322d90e06a72b4df9dca --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-10058 Malicious code in oopensea (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9400a8b0c9b0c8218eb8376d62c512c8c50c8cb1f1fa54a310c6aa5d17e14e0b --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-10093 Malicious code in openza (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fbaf59e19187d3a389d16ea0c20582da8f14f37c0df06e004fa36024ae6ab9bf --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-10077 Malicious code in openseae (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bb43a8865c5902deb419bbb558c242b5f9e441e94e4789784b5cc82cad02172a --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-9981 Malicious code in etheerum (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4f116d23a37e9b35737d70caa227a83a67e387de2ff2cccef342c0ad5487fe1f --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-10196 Malicious code in wdb3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 40c8cae0ed147f872f69edc3d11e0e1c730e0b1c852e7718f6b5b73e646565b5 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

MAL-2024-9980 Malicious code in etheeruimm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bcf78c3125a0f3ac1762eb1b0bc846fe7fab0c00be15418fd217370c56b26bb9 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...