Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2026/07/21 5:18 p.m.•6 views

Malicious code in hellospa (PyPI)

Source: kam193 276fd70d8b56465c07e6a06281b93ef014fcab93ce00be738e645501713dbdda Package exfiltrates credentials, env variables and other sensitive data on running. Notably, exfiltrated cloud credentials were immediately checked from a remote location. --- Category: MALICIOUS - The campaign has...

5.9AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/03 10:14 a.m.•15 views

Malicious code in hellospa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 276fd70d8b56465c07e6a06281b93ef014fcab93ce00be738e645501713dbdda Package exfiltrates credentials, env variables and other sensitive data on running. Notably, exfiltrated cloud credentials were immediately checked from a remo...

7.1AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/12/03 10:14 a.m.•19 views

EUVD-2025-200743

Malicious code in hellospa PyPI...

6.6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/12/03 10:14 a.m.•14 views

MAL-2025-191972 Malicious code in hellospa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 276fd70d8b56465c07e6a06281b93ef014fcab93ce00be738e645501713dbdda Package exfiltrates credentials, env variables and other sensitive data on running. Notably, exfiltrated cloud credentials were immediately checked from a remo...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/11/24 4:44 a.m.•3 views

Malware in hellospa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2025/11/24 4:44 a.m.•5 views

Malicious Package

Overview hellospa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2025/11/19 7:08 p.m.•10 views

MAL-2025-190579 Malicious code in hellospa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/19 7:08 p.m.•18 views

Malicious code in hellospa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...

7AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/11/19 7:08 p.m.•12 views

EUVD-2025-198218

Malicious code in hellospa npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder