Embedded Malicious Code

Overview json-rules-engine-simplified is a simple rules engine expressed in JSON Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentia...

Malicious code in py-pongmaskgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ca30eca9847b01b8f2ecc7107ed916e8f7418cab08e81146c6ce73077afd3ea7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpushintpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1675e5d330eccdd419b14df2cd6a1d06edc09a0139276575bd00be219e0783c0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpmchydracraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac25be04b8afa37c1f9be85c566672690932ae38e50a4701a7d79a7d143bb431 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-maskhacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7559cba6b2cd3e9c2cb4c8ee51fd43bfd2bbe3725e21905e129555fb9b968ead EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-1907 Malicious code in matpltolib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c335a789dcce1af7de0ef188d9b3a6a90a7e44d4d9187532047186a864607c34 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1660 Malicious code in bitcoinli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0e186eefad42a87c5451039d0b8f5c6552f86f3ef1707a6c88cde28b994ad26a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...