MAL-2024-11668 Malicious code in pycalculater (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 84e239de4d2d6d9652a78ead4c1ebb6b3f4952aeb54dc51dc30765eaaf806368 During installation, a remote, obfuscated executable is downloaded and started. The executable at least disables automated updates, malware protection and othe...

MAL-2024-11576 Malicious code in discconnect (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cd96a216a1790b73568af638b97003c7abd1f502c962137cd1084fb48ebcca64 During installation, a remote, obfuscated executable is downloaded and started. The executable at least disables automated updates, malware protection and othe...

Malicious code in reverse4343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a90c21a3dc6b4091f1ccd6f17c99b1ec955954d2b78e93029e63c33f12ed3c7d The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in reverse434343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9107d563a329f12fdff39bb22f6d6593f6d005d38f9738c2d3a78c94ee368262 The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11694 Malicious code in reverse434343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9107d563a329f12fdff39bb22f6d6593f6d005d38f9738c2d3a78c94ee368262 The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11582 Malicious code in eosio-signer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 647b75de784ff7b23edb8a5b76d1a017b02d1fd719c6a5a92587fa8d89c25abf Installing the package exfiltrates basic data about the system --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anythin...

Malicious code in tingetone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 014c881ede6ff27565f1de4842b4f7c10162a2daa47c98a4470188571a60639f Importing the module starts the banner function, which downloads and runs an obfuscated remote script. The package seems to be a clone a one of existing simila...

MAL-2024-11727 Malicious code in tingetone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 014c881ede6ff27565f1de4842b4f7c10162a2daa47c98a4470188571a60639f Importing the module starts the banner function, which downloads and runs an obfuscated remote script. The package seems to be a clone a one of existing simila...

Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

MAL-2024-11530 Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

MAL-2024-11611 Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

Malicious code in bytebs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 443278bc9421868cfa1431a267241ecb62582b57285a1d5f093d7109e2d12288 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bytepps (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9aa4ba0120720e5b121a5cbccaa4bd97efb87a5f2fa881edc7a297d33fab3c4f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in adandu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f79b041fd4b5d0177f66a15f603d406d6eaeae16e312194b27685e261ce50fc A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in adanbu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b04d14831fc213fd7496512c984142a73dd29b775dc40dd2fd5be4f26e06af3c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in aslmutetion (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c052a3699080e1fef9f2799c9b4bd850eedd75f5fca1a3ea0dce97607fce9e49 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in batchran (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 19ed06a25f8868beb5f8e987240e85eaff57b5c995a393fbaa3ff7c517654e8c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in ddim (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c8ce1850b575ef11a2b475f0451a62134cb8af0fbd39dc812da541dc59987f36 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in deepsolid (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bd495f31431e621d5ce9440e408d5b86e69cf6545ab1cff1eff26ff87b0a4d08 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...