Malicious code in esqcved (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a7155355697f245f3cece4f295ab464f0648a3f03be862083e531aeb7295c142 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-gamecv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b4b87457e1c7e80df3fcf0c2c06d627fb7dd3442795fba3a652aa4e45f20d0aa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in intelpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ab16fb631ead434b02d95a8a61583a10721de7673baad5bbff915f046b8ba627 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in lgtbstr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8310dfb73003443210673d27ba3bdca9374cf87e43b93cd847c07ca584bdaa2d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in proofcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b726841057aceeb3d409d863ffdaa9ced18ee50b9051df1f4e81159493f17928 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in adcpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aa5dc890da9fcf136c6f31ef6d26bffd12f4dc4e8d57073af42cc29dcadc5dc1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in maatplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5fd54b8946d61b481aceba9e137754cab3a42427be859691965ca12ddb9083b6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

PYSEC-2022-43023

The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...