13403 matches found
Malicious code in req-pre-automate1 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d7e3b4390ccf704149d75e6c01eb4303d21c263875186c930181e0aa7ca6495b If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...
MAL-2025-191856 Malicious code in req-pre-automate1 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d7e3b4390ccf704149d75e6c01eb4303d21c263875186c930181e0aa7ca6495b If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...
Malicious code in loggerex (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7a27ca3e673f54a1e041d55e84b8a0e871239df2331c9a3fd1dbe20d1fa86f56 It's a clone of "loguru" package which on import loads a second-stage script from loguru.guru. This makes a few checks and downloads the next stage, which is a...
MAL-2025-191882 Malicious code in supersafereverse (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 278b176bded4d8a1ad0e2e56a576804e4ed53fa2797fde701bc752bbe68379ab Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in supersafereverse (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 278b176bded4d8a1ad0e2e56a576804e4ed53fa2797fde701bc752bbe68379ab Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in prof-tg-dooorto-qu (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b4b5d4d87a39a286c8665b40b510ac0016d0b71fcc83fde246dd1bca7402af09 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...
MAL-2025-191824 Malicious code in prof-tg-dooorto-qu (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b4b5d4d87a39a286c8665b40b510ac0016d0b71fcc83fde246dd1bca7402af09 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...
Malicious code in num2words (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a528edd10eb63e7c7932830fdb314983cadc840ce8ccfbaa04ad821bbdc1da The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions...
Malicious code in zlsrc (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6624 Malicious code in zipf (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zlapp (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zipf (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6623 Malicious code in ziggonext (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ziggonext (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wallets-utils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tulipgui-python (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in torrent-tracker-scraper (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in torchao-nightly (PyPI)
--- -= Per source details. Do not edit below this line.=-...