OPENSUSE-SU-2025:15289-1 python314-3.14.0~b3-3.1 on GA media

These are all security issues fixed in the python314-3.14.0b3-3.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in jirawrapped (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22cb10a2f4a514eac4296e09281b5b08784e62d6616a520e032e563d69a0e6e1 During installation, the package attempts to exfiltrate browser history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in rehttps (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08172961784989f62b2b0793fa7686e1c25883883f790293df61591aa2fc6940 During installation, package attempts to download and starts an executable. The package itself is a clone of requests --- Category: MALICIOUS - The campaign ha...

Malicious code in walletutility (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b2977792a67d074770c5080ac055addab8c5bf6b77bf203132fb2c67f32091a6 Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in wallet-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c83a3acdf0b02acc2a9af7cf885f2f744a154847edc66e1264ee1c38d8d7b984 Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in walletsdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 24b8f8046f66b9996b1f2169f1034b1c35f0760e09d4e91e712d0b3a36a88d6e Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in utilswallet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 587ebf505d5385c1a6f9034ff8ede5f52b9f7f31ad154261c0f5a289af62a33d Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in walletsutils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 98651db61cea6613aac5b784cf567a82461f39c8cfa2c7634504ea2708989408 Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-6613 Malicious code in utilswallet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 587ebf505d5385c1a6f9034ff8ede5f52b9f7f31ad154261c0f5a289af62a33d Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in managment (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 754c9b609bb8dafc0fd21d141cd216744d9f2aa1f23898990c52e872fdc23e1a Installing the package starts a revshell and download and starts a remote script depending on version, different malicious functionality. The name seems to...

Malicious code in cpan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e70433969aea3c8283f99098b25b8a598f427b5fd451e9bfd5bc46098704bfb2 Installing the package starts a revshell and download and starts a remote script depending on version, different malicious functionality. The name seems to...

dbgpt-app (0.8.0rc1), dbgpt-client (>=0.7.0rc0, <=0.8.2) +2 more potentially affected by CVE-2025-6772 via dbgpt (0.8.2)

dbgpt PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbgpt and may be impacted: - dbgpt-app 0.8.0rc1 - dbgpt-client =0.7.0rc0, =0.7.0rc0, =0.8.0rc1, =0.8.2 Source cves: CVE-2025-6772 Source advisory: SNYK:PYTHON-DBGPT-10562212...

Malicious code in sqiul83 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67d309c2d4c740426c07cc17768f6313eebd765242e7e4a63aa04213d21358ea During installation of the source package, it attempts to silently download and start a remote executable. At the time of analysis, the downloading link did no...

Malicious code in mainx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a77aad2f42165ec9582f04fffab948f6a1125564e34f4d09c8d089b2708d8d2 While described as educational package to simulate post-exploitation environment, the malware is active and once started, automatically attempts to exfiltrate...

MAL-2025-6540 Malicious code in mainx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a77aad2f42165ec9582f04fffab948f6a1125564e34f4d09c8d089b2708d8d2 While described as educational package to simulate post-exploitation environment, the malware is active and once started, automatically attempts to exfiltrate...

SUSE: Security Advisory (SUSE-SU-2025:02057-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-6477 Malicious code in chatgpt4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a2f99d20569358bdeab51db7e4f6ea0348c87bbf832a7bc244581a472a05072 Importing the module starts shell code execution --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in chatgpt4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a2f99d20569358bdeab51db7e4f6ea0348c87bbf832a7bc244581a472a05072 Importing the module starts shell code execution --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-6520 Malicious code in hashidf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 126b111d14601f2ff653938378c5e6d0f534439f0eac8db7984dfe7aa0f20b52 If ran as a module, the package silently starts a binary hidden in a txt file in the background. At the moment, it appears to be PuTTy, and without additional...

Malicious code in spokeo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 77e85dedb987a603a027306a57e7b988de52be0c9f12fc2a04dfacf5e3adcd19 Installing source package or importing the module starts downloading and running an external executable, which is widely recognized as malware --- Category:...