148 matches found
MALW
CVE-2007-4559 - Polemarch exploit Full working exploit for Polemarch server https://www.polemarch.org/, using CVE-2007-4559, allowing: Injection of a cryptominer for monero using TOR for better hiding. Injection of a rootkit targeting most common sysadmin tools. POC Proof of concept using...
redtail-ioc
redtail-ioc Indicators of compromise and a triage script from a Linux server I run that got popped in July 2026. This was not an elite failure. It was a basic mistake, owned in public because shame is more useful when it comes with logs. I wouldn't have caught this if they didn't make a stupid...
MAL-2026-17471 Malicious code in caoxiltts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b18de964968b1d4f9333a1bcc5f247b3978f9fdc418f01f7e9a3c7bc578a62 The package advertises itself as a TTS inference helper but harness.run downloads two gzipped ELF binaries from a configurable host, verifies them...
Malicious code in caoxiltts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b18de964968b1d4f9333a1bcc5f247b3978f9fdc418f01f7e9a3c7bc578a62 The package advertises itself as a TTS inference helper but harness.run downloads two gzipped ELF binaries from a configurable host, verifies them...
Malicious code in infrabench (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...
MAL-2026-17470 Malicious code in voxcpmruntime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e0220a1b37d6391262539694a04726e2e5aea888941b384c4048d0a2443b2 The package presents itself as a VoxCPM TTS runtime but is a binary dropper and cryptominer loader. harness.run downloads two executables 'voxcpm-cor...
Malicious code in voxcpmruntime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e0220a1b37d6391262539694a04726e2e5aea888941b384c4048d0a2443b2 The package presents itself as a VoxCPM TTS runtime but is a binary dropper and cryptominer loader. harness.run downloads two executables 'voxcpm-cor...
MAL-2026-17468 Malicious code in voxcpmintel (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 28ef552864bd4b4558137163734077a2429281647a26868f40d8d735af95c967 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in voxcpmintel (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 28ef552864bd4b4558137163734077a2429281647a26868f40d8d735af95c967 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2026-17465 Malicious code in voxcpmeval (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 18746c0b1bc840ee608e3aba81f9e18e4411373b8993d315177e95614fe67b08 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in voxcpmeval (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 18746c0b1bc840ee608e3aba81f9e18e4411373b8993d315177e95614fe67b08 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2026-17466 Malicious code in voxcpmkit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 92a0735c100233f803adcf4cec20645acbb5f01b1757e8889dfaa631e49dae71 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2026-17467 Malicious code in voxcpmui4 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c0f6ddfc6a324d42219bbea8405be17115f83eca0e2d2eecb4e3fe6b6ec3dbde The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in voxcpmui4 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c0f6ddfc6a324d42219bbea8405be17115f83eca0e2d2eecb4e3fe6b6ec3dbde The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2026-17464 Malicious code in voxcpmui3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9db4ea82be2cd2e2d4d7eb40236b22a9ccd0e0414cad836b98ca63468c4071e The package presents itself as a text-to-speech inference harness but contains no TTS code. On calling the exported Harness.run, the module chmods +x...
Malicious code in voxcpmui3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9db4ea82be2cd2e2d4d7eb40236b22a9ccd0e0414cad836b98ca63468c4071e The package presents itself as a text-to-speech inference harness but contains no TTS code. On calling the exported Harness.run, the module chmods +x...
MAL-2026-17463 Malicious code in voxcpmtts3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208e19b8b5c2d9ed6169765b2b5985147d0be136e9bb5f83adac6cc691ff4aa5 The package presents itself as a text-to-speech inference library but ships two bundled binaries that implement a cryptojacking payload...
Malicious code in voxcpmtts3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208e19b8b5c2d9ed6169765b2b5985147d0be136e9bb5f83adac6cc691ff4aa5 The package presents itself as a text-to-speech inference library but ships two bundled binaries that implement a cryptojacking payload...
MAL-2026-17461 Malicious code in voxel-tts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bcd85c4464339b45ec445d1c402ecbc97ab4b50b71738d1fc3873c88f9cff5 The package advertises text-to-speech inference but contains no model, audio, or inference code. Importing voxeltts loads voxeltts/harness.py, which...
Malicious code in voxeval (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b542a4c53b4c08e104eebfade64c8e91c8d731c4a9bd298e48a258117c5b1bb The package advertises itself as a TTS evaluation harness but ships two large bundled binaries and executes them on the installer's host...