Malicious code in automsg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a96ae8403b713d8dbe1fbb5e8a17e2e06d08740e459e90b03769d5dfc7da33d9 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pykane (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f0e00230ef4f47cbb9d43ffd849aa41f1e4f8b192944f56fdd49e6e24e6dc8d Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pysleek (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebcd258899197196fca41e03c7a6781f5087b42fd37c0276ae9a892bef8d4910 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in dahood (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b9cc2a4186b5ad68e11dc68aa719583b8f3a746c9f13b8b3b950f9653df0e909 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pyadd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67e5e3d0aff485ca2bf6f83151e1ecfae4a9b9335db657c72142ac9fd034250e Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in rolib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b16e729f1b088aa209bed8297f772d9b51eccf7c434e2a3b8aa3ff43f17f565e Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in rodll (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 371166aacf4728718533b433b86908bce1066651f8fb12d3b6a2685612218386 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11673 Malicious code in pykane (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f0e00230ef4f47cbb9d43ffd849aa41f1e4f8b192944f56fdd49e6e24e6dc8d Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11750 Malicious code in xsilyxd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 acb32201e238cb8cad93c54f19da257035f478ebebf6a5d7709ed787525b08b4 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11654 Malicious code in partpyth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10b94529eaedc3a17c5c94e13a371b59109c0713856e4a5ba371ec57d6717122 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11687 Malicious code in pyvantq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6c5b2c1c554a0ffc8e3b4fd9ea4e9abbf3c9773146ceacbf17557b044032dd2 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

MAL-2024-11660 Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

PT-2024-40522 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: Exotel affected versions not specified Description: The issue concerns a compromise of the Exotel project on PyPI through a phishing attack, leading to a malicious release that downloads and runs malware during installation. This affects...

Malicious code in utilhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f91f83da1ea0307373682776ad3de3a3fd320d57280f40fa82f47aaf316d3062 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in flophttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45ad705b0505a09a4123e74a68d03c4a16dd91604a6d9ab323eb0d776320f68a In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in assulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 86723cbd5b75cbf26ac4ec2f1dc722c282d7f2df07909a7d7a4ee4c07819d3bd In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

MAL-2024-11532 Malicious code in assulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 86723cbd5b75cbf26ac4ec2f1dc722c282d7f2df07909a7d7a4ee4c07819d3bd In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in assaulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c588101b33f530e5b4d8504f4a9cf1353eec7356231e9f4137ab1a187b780d5 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in asyncmodules (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4089e0f824ae366e1e3e128e2213a6700d6bddea0b9209fd426148a0792edd53 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...