12 matches found
Malicious code in somepentest-test-package (PyPI)
Source: kam193 182c836a44b13e44121972147eb66dc5d5a419513811927d1a3c7ca39be6fa4d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
Malicious code in pytorch-mutex (PyPI)
Source: kam193 4959fc9ffb04b2e53d068fa3e6564a21dd3bd4b6374324416a643c3e58ebe330 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
Malicious code in mlc-ai-nightly-cu123 (PyPI)
Source: kam193 9c2954c829994eac2d7a1843849faec71a96ff47fdd4d6ac9453b654df2aedbf Installing the package exfiltrates information about the host, including environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-01-mlc-ai-nightl...
Malicious code in django-aerospike-sessions (PyPI)
Source: kam193 feba434f8a55ca606e9301308486d6d3d6f518430157438198d692432c18da23 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
Malicious code in ci-metadata-python-logging (PyPI)
Source: kam193 b2ec44231abe88a238f040c6ed291532c456a0f07e91b5966a76b5262526672d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
MSC-2025-8385
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive private user information –...
Malicious code in loadcoremwassistant (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 20499474b0d0eb5a02bdd34aba8dbd438993b87506fb7a9bd88a62a729736221 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MSC-2025-1878
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive private user information –...
Malicious code in pypiele (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ee88c93851e948d712a89564bfc344ce19843d9b5ed8fcd696d5d530fdc59e34 Malicious packages campaign targeting developers, payload is hidden using Steganography, exfiltrate host information...
MSC-2023-11360
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive private user information –...
MSC-2022-7706
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive private user information –...
