MAL-2026-15927 Malicious code in qoeoe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e6c0c50dfb4a99c6e8b2ca640cadd33877e737479d8739d5db5b39271bc967 The package ships a single module qoeoe/starts.py whose entire body is a lambda that base64-decodes a reversed 108 KB string literal and passes the...

MAL-2026-15926 Malicious code in astlsi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222a62d677f99497f67476b9cc87886c05fb2a08827430934fb518798abb8339 The package presents itself as a proxy health-check utility, but its exported starts function walks /storage/emulated/0/ Android user-storage, collec...

Malicious code in astlsi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222a62d677f99497f67476b9cc87886c05fb2a08827430934fb518798abb8339 The package presents itself as a proxy health-check utility, but its exported starts function walks /storage/emulated/0/ Android user-storage, collec...

MAL-2026-7015 Malicious code in turbom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 64978153f8a987180b6c8e88b5787598ed949a604527f0098271f97d8c66a235 Starting version 1.0.1, the package contains obfuscated code and embedded binary that is executed during the import, sharing many similarities with package...

MAL-2026-6979 Malicious code in turbod (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 78d60e25c1258021c4fb69a93456c76ef1157be852c7b9dc7165290ca599b0f7 Starting version 1.0.7, the package contains obfuscated code and embedded binary that is executed during the import, sharing many similarities with package...

MAL-2026-6975 Malicious code in oxntime (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4d96d9d5b1800042c94a33b8ac459abe42775a2c07e7cbd4ca2f689bdcf141ef The package contains obfuscated code and embedded binary that is executed during the import. The embedded binary targets Android and seems to act as a guard fo...

Pixnapping: Bringing Pixel Stealing out of the Stone Age

Pixel stealing attacks enable malicious websites to leak sensitive content displayed in victim websites. The idea, introduced by Stone in 2013, is to embed victim websites in iframes and use SVG filters to compute on, and create side channels as a function of, those websites' pixels. Fortunately,...

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...