MAL-2026-11416 Malicious code in ailaunchkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998620f0a5d4d55fb3afccbaa210f7822a002db4b8ad09d5dae4954723264fb7 Package ailaunchkit version 0.1.2 on PyPI was scanned across 6 files with no static-rule matches and no traced behaviors indicating exfiltration,...

Malicious code in catalogai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb9ff2c71a85c2bac770a874ed3c811e963ba9b3da37417fb600678d8119991 catalogai 0.1.2 presents itself as a semantic-search / AI-catalog library but the shipped modules perform browser credential theft and...

North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

U.S. and South Korean intelligence agencies have issued a new alert warning of North Korean cyber actors' use of social engineering tactics to strike think tanks, academia, and news media sectors. The "sustained information gathering efforts" have been attributed to a state-sponsored cluster dubb...

Malicious code in giptython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e4f24f0e607f40d62174910c08aebbf2b13c2c3d4c095e0704bbaa819ce37082 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ppycodestyle (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5fdcbe0233c3735115fcc742d326d05f28a8c4c5873601798a4410498bdd82d3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pycodestyyle (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4c5410b68fd0bb9da5f5dad884547364e922f1c1eaf6e01aa71e7d7736d0ac69 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tensorfllow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2ba43e5ae4441e87766653d8096fb936bfe20f1b3c53b02b6a2fe35990a1ef0f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsouup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f8e80f99330a5835bc3bbf4e44384e1b14ef516af8e8eb82cdb70135dc0132bf Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in bitcoilnib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4dd8dd1e362e84abd69705afac8fe36e56efb925bb12b545a441c0ebff4f6b10 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in crpytocompare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8b5137da85d964b67e54710e2ad53fe6dbd8442430132a190d36b2851f83462e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in crypttofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5c62d3f6332ba772787a4d6243981bf1ac8450cdc3b41f8ad9b204b31bee5633 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Man Robbed of 16 Bitcoin Sues Young Thieves’ Parents

In 2018, Andrew Schober was digitally mugged for approximately $1 million worth of bitcoin. After several years of working with investigators, Schober says hes confident he has located two young men in the United Kingdom responsible for using a clever piece of digital clipboard-stealing malware t...

pyWhat - Identify Anything. Easily Lets You Identify Emails, IP Addresses, And More...

The easiest way to identify anything pip3 install pywhat && pywhat --help What is this? Imagine this: You come across some mysterious text 5f4dcc3b5aa765d61d8327deb882cf99 and you wonder what it is. What do you do? Well, with what all you have to do is ask what "5f4dcc3b5aa765d61d8327deb882cf99"...

RansomCoin - A DFIR Tool To Extract Cryptocoin Addresses And Other Indicators Of Compromise From Binaries

Extracting metadata and hardcoded Indicators of Compromise from ransomware, in a scalable, efficient, way with cuckoo integrations. Ideally, is it run during cuckoo dynamic analysis, but can also be used for static analysis on large collections of ransomware. Designed to be fast, with low false...