Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/10/03 6:31 p.m.•8 views

Malicious code in infrabench (PyPI)

Source: kam193 4abc7154004498e9054ca8ac239acd73ab86815f6029ad5d52e4c883488f4c70 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-voxeval Reasons based on the campaign: -...

5.8AI score
SaveExploits0References7Affected Software1
Snyk
Snyk
•added 2026/10/03 6:31 p.m.•18 views

Malicious Package

Overview infrabench is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/03 4:21 p.m.•35 views

MAL-2026-17469 Malicious code in infrabench (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...

6.1AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/03 4:21 p.m.•30 views

Malicious code in infrabench (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...

6.1AI score
SaveExploits0References4
Rows per page
Query Builder