MAL-2024-11687 Malicious code in pyvantq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6c5b2c1c554a0ffc8e3b4fd9ea4e9abbf3c9773146ceacbf17557b044032dd2 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11684 Malicious code in pytkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9a84a25f2ecd00da29cb51692121d6ab49559ebdee41aff7ab463020612c5167 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-12332 Malicious code in pymatcha (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 779c6dd8d3b44cbb116c534cbd88dd2a73e5ee6f946e7e37c66f7eba13dedefd Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11677 Malicious code in pysolara (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 349cad70487c67d06c267c1bf8200b6ffd83ae0d0d1eeb8be9b80bd93b2c154c Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11550 Malicious code in cblines (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80531e39cd96b75b32c7549840f7bc6984377765d9f9f663c0b560332b4e1b84 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11750 Malicious code in xsilyxd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 acb32201e238cb8cad93c54f19da257035f478ebebf6a5d7709ed787525b08b4 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pyvantq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6c5b2c1c554a0ffc8e3b4fd9ea4e9abbf3c9773146ceacbf17557b044032dd2 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11670 Malicious code in pycordapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 577f50cf18141b14ac9a078d8c777f738c62cebdb4ff8b5b00c6fdb38812acdf Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11654 Malicious code in partpyth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10b94529eaedc3a17c5c94e13a371b59109c0713856e4a5ba371ec57d6717122 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11567 Malicious code in cryptocalls (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 68c6992c85099024497d762301f8ae5ee3217a04bdcddff3d4f3ecc214bd737a Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11711 Malicious code in solaraund (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e54b1521b270ef90ecd30f1d3a59dfcf3027ce2a7c1637d45a8ac2a6e82aa929 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11673 Malicious code in pykane (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f0e00230ef4f47cbb9d43ffd849aa41f1e4f8b192944f56fdd49e6e24e6dc8d Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in antibyfron (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b18b332b0269a1ac32574b6676f3c4a5d85c8bc7d64519987a8ad8d740038331 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

MAL-2024-11660 Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

PT-2024-40522 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: Exotel affected versions not specified Description: The issue concerns a compromise of the Exotel project on PyPI through a phishing attack, leading to a malicious release that downloads and runs malware during installation. This affects...

Malicious code in assaulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c588101b33f530e5b4d8504f4a9cf1353eec7356231e9f4137ab1a187b780d5 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in assulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 86723cbd5b75cbf26ac4ec2f1dc722c282d7f2df07909a7d7a4ee4c07819d3bd In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in asyncmodules (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4089e0f824ae366e1e3e128e2213a6700d6bddea0b9209fd426148a0792edd53 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in flophttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45ad705b0505a09a4123e74a68d03c4a16dd91604a6d9ab323eb0d776320f68a In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...