MAL-2023-4194 Malicious code in libloadhackedpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c573bcaf51676f3e5fa15902066a93d0d57942556a97ac03f2a3fe886ade2c75 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6479 Malicious code in selfpostramurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f1a68938184e48048c8ae8e7d20b68e8af6928c88024821c33fcef9765613b1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfpostramurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f1a68938184e48048c8ae8e7d20b68e8af6928c88024821c33fcef9765613b1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2849 Malicious code in esqedstudynvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c65e9fbca2a985a9d02820bd6f6ebec1783bc6617f610cc8d21565be80cd9a89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Expedia Group Bug Bounty: https://www.wotif.com/vc/blog/info.php script is prone to reflected HTML/CSS injection and COOKIE leak

The info.php script on https://www.wotif.com was vulnerable to reflected HTML/CSS injection and COOKIE leak due to caching of HTTP headers. An attacker could inject malicious HTML/CSS code and steal victim cookies. The vulnerability was reported to the vendor...

Malicious code in esqgrandhttpreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 42a610a43aa7326b0be22ead65b1a49dce7978f2bd5536242be9583aa5bc69bb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7161 Malicious code in tpintelpepcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc19ba240ff76fc7e4fc4d165e353608668ebdb3fbdb9d0a836c177d177ad0fa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4282 Malicious code in libpaypalhackedlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 09fe30dc7f1ee122013b8b189af5d2189f0b106b9b876a5fa48819228134d23f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7456 Malicious code in tppyencodepull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b00d54d55ac515db630e72e6e0c819437b4e0290d7810c9ab73e7eee5ed778b1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpintelpepcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc19ba240ff76fc7e4fc4d165e353608668ebdb3fbdb9d0a836c177d177ad0fa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqinfocctool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b2fb5ec982d8497683b4784537d500c740679efad82005681a4e41ebef4a9e09 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7744 Malicious code in tpvmstringgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7c73f0ff0bc2bbc5dcdb785003fa7257916158ceead89abaf68df9948e480d16 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2974 Malicious code in esqinfocctool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b2fb5ec982d8497683b4784537d500c740679efad82005681a4e41ebef4a9e09 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5492 Malicious code in py-proofrandreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a2aef03260ce84ff7cbb288e6bc7151b60750570a378bd9effe6c30d1c979dfc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfcraftpaypalultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0bd88c5d93bf1b84ac7e708f9555c00022b7f66b462925039d61daf7ded08b6b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7696 Malicious code in tpverguipost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx af491bbc3bceb16f2e47328811f8575e6675661dca92e45033d3ea7c908d0d51 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5501 Malicious code in py-pullhackedurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f14c4abc5524de4c6acba17912b6302c24788605814f3a260d0418cd5709a47 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2965 Malicious code in esqhydracvpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 031b5e44fe48a4834cec64245a20c10bf6a9541ea6a8ce274d84a1eb1e986501 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-intintelhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e509034a27e2a180ee5ee1c8d3387acebc5c0f89c5837b0d3e49150150c2fc07 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libencodeultrainfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 784672c439827c688d501aef7c51cd613a8c829999a1107d168f32edb7962ad2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...