MAL-2025-41789 Malicious code in trongridperm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eb2deee7747ccb12e0b2da45c212a0678fc8a3f02bf72b8aba4508ae70e3e26a Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in maxload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8 Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but th...

MAL-2025-41701 Malicious code in maxload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8 Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but th...

Malicious code in someeebbb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0fd59432f228380b77cbfb70e5a776f13b909d7be4b57ce72e270f41ac035ee0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41764 Malicious code in someeebbb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0fd59432f228380b77cbfb70e5a776f13b909d7be4b57ce72e270f41ac035ee0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in triple-equal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10911ac4eed73695e2fe15b22983d481742de5688de5b3329d330daa2f88bba9 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...

MAL-2025-41786 Malicious code in triple-equal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10911ac4eed73695e2fe15b22983d481742de5688de5b3329d330daa2f88bba9 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...

Malicious code in testpackageroietest3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 88b61508de8bb1a4224db6f1b2c7f8784f678f59e6ecacfac77c0a7d3f0409df Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in testpackageroietest2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 540d9028178695a791b307758df0ac5dca1f6c77f19e12579e4b0745580f358d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41775 Malicious code in testpackageroietest2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 540d9028178695a791b307758df0ac5dca1f6c77f19e12579e4b0745580f358d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in greater-than (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9287f16baf24f1b5d14e3cdae0ae58d583bcacfa0a19d78c41fc32b3fdce547c When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...

MAL-2025-41681 Malicious code in greater-than (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9287f16baf24f1b5d14e3cdae0ae58d583bcacfa0a19d78c41fc32b3fdce547c When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...

Malicious code in requires-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa1ee2e2c3ead90338250a60177535b23b5f30016e1d06a5b944092cbc3305e7 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...

MAL-2025-41747 Malicious code in requires-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa1ee2e2c3ead90338250a60177535b23b5f30016e1d06a5b944092cbc3305e7 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...

Malicious code in prof-qux (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5b87af8d8f13bd43c1cf3490ea551b8d60fe05a482875597ef2fe5d2c200ca19 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

MAL-2025-191822 Malicious code in prof-qx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eb25a7704dc642f82be2ae6a92dcd60cc3235144351fbc18cd11ca96d970c7e3 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

Malicious code in m5tlprovetomegz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 41041b6e55e23e7b8d40be5bb95a75fdba5b64cb9524c86054deabcd2177e459 Importing the module starts downloading and executing a file recognized as malicious by AVs --- Category: MALICIOUS - The campaign has clearly malicious intent...

PyPitfall: Dependency Chaos and Software Supply Chain Vulnerabilities in Python

Python software development heavily relies on third-party packages. Direct and transitive dependencies create a labyrinth of software supply chains. While it is convenient to reuse code, vulnerabilities within these dependency chains can propagate through dependencies, potentially affecting...

Malicious code in testpackageroietest4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8513ccd29444557d2b772e8c39dcbac59fc00b022d9119643a3b8dc9906585b1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41777 Malicious code in testpackageroietest4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8513ccd29444557d2b772e8c39dcbac59fc00b022d9119643a3b8dc9906585b1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...