Malicious code in caas-jupyter-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 48a472c7cfbdf9c730e06e827de93f0566895c78f6b1130ec814a31958409d94 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in w3shi-h1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 47a1a62947736a51ca9d7d239d8533828679c6e1597205b6316ee4a9af95a41a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in packed-w3shi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d670904891ef361ef283e3f218f21b6e3758847277e8bccb0dbecd08b08971a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in supersafecalc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7e6f4c47c6eaf1976109a771b78c82dbda4409960e11301f85bf120add36b78c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in blabutt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 258dbe10b138b170391a1beecc464e618b85c47192f558a737105ef3525948ad Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-191893 Malicious code in testcatplzignore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3cde630e4fbb39749856eccaa8f1afb813c865152bcf6d2eb0a639f71f2b4cb Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in hancsv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bb3fdca931bea8323cd7a8c2578f6d0c0594b3ea1b30df1819830168fe90983b Importing the module triggers downloading and executing Powershell script. The script collects information about the host including e.g. startup applications a...

Malicious code in conn-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 25be0eaa51dd4c4ba03afd81b4cfad938ceb07dacb0195a9179b46413178e086 Already during the installation, the file with slightly obfuscated code is loaded and starts exfiltrating information about the host. It especially targets...

TIBCO Security Advisory: November 19, 2024 - TIBCO API Exchange Gateway - CVE-2024-10514

TIBCO APIX - XML External Entity XXE Injection Vulnerability Original release date: November 19, 2024 Last revised: --- CVE-2024-10514 Source: TIBCO Software Inc. Products Affected TIBCO API Exchange Gateway 2.4.0 and 2.5.0 Component Affected API Exchange Gateway Description The TIBCO API Exchang...

Malicious code in instacart-roulette-daemon-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a3b808e86bd3e62945973ac3b25e0f07437a3031a13b6dd2a0567eba90a63821 During installation, the obfuscated code attempts to exfiltrate basic information about the host. There is no other purpose of the package --- Category:...

MAL-2024-12335 Malicious code in random-security-test-pkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8d5e8dadc66c780e3fc3351cf55a305fe623b46a48e96847a7da95ea0e5ec211 During installation, the obfuscated code attempts to exfiltrate basic information about the host. There is no other purpose of the package --- Category:...

Malicious code in bytebs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 443278bc9421868cfa1431a267241ecb62582b57285a1d5f093d7109e2d12288 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bytemlperf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 abcc70611e2d35cabe7d6a6f7e88ff8f9fab7d9e2a42b0fc3c0d1f036c8582be A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bytep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ab7e80f551a6d38ee9f4ee2163f0cb195257d40fb013074ff8887a8d70111ab A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in oaieval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd257dee43f966eaacc56e07462eae9170a8a81dc1be6f0df9145f8c3a44de59 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in cittronn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfa8d2dd5fa7ca684cd31b55440d9eb21ff2197a6a774c36b07fe88f804554d6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in hello-world-installer-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aef5897e3e41898c7d14d6acf00254f63adbd159b1a9cc9adba26603edee668c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in c8tks94kspjghtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9182e332ef5bf851522bb14086c5159f1c606fb90094722f856c87f36e382da7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in springboot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 16d85bf1869194ac1171299e8e0d4e04cbe415bdde4f6eb08730c6018f8958bc Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in mac12manoj (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 629aa2cd2a27a849eefebdad3efcd6cf183d799a21451edaf209f6dda1e614d8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...