MAL-2025-191673 Malicious code in acloud-clients (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 89813876cca364b0dffda624005d527aa3c9f54ea7ce20af8186faf8f374ba6f This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

MAL-2025-191900 Malicious code in time-check-server (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a5da6618a6f04ceb52acd56bc78e318cb7fbffa07ef3acc041729afe52428c44 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

Ultralytics AI Library Hacked via GitHub for Cryptomining

A supply chain attack on Ultralytics exploited GitHub Actions to inject malicious PyPI packages. Discover how it unfolded and the steps to mitigate the risk...

MAL-2024-12309 Malicious code in my-service-manager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 58c8e4c726cef11c6d7d60916210f532060a6ff7a98bb7fea5872eb10335dd5d While the package appears to be a manager for Windows service, the linked executable is an infostealer with capabilities like cookie stealing ang keylogger. Th...

MAL-2024-12267 Malicious code in example-pypi-package-loler1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bb19218b6d780973bde55d613a16a9a637728a4d01e79d570bb3406633f0f639 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2023-4035 Malicious code in libguigrandmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6aecdbe6b089ffe59ba97add73503b78ab4c6dc432a5b733ed03687c146effbf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfinfoponged (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 04ac261aa352ac2d7834c9f0783bec5a7f6936cd81ac4ffa923993351d85657d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2875 Malicious code in esqgameloadrandom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22513bf97736a201d391141f3507e7f37b18c109a7e0c5c37c9a285a21add19b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4388 Malicious code in libpullurlcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx edab3edc06b209aa1bbec0f7e1fc7ae8f0a03b9b53bbc5d74f1cbd1aec12bf8c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3359 Malicious code in esqregrandinfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f8d04771fe2692fa68aec942e1f0316084f225ace5dbf05dcd0f1fb142e5a921 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7206 Malicious code in tplgtbreosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9db3e0153a1a7abdd2f59595325f3daef7efd76c8cc6d49a7eb8b55871664410 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3512 Malicious code in esqveradvirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b73ec605ff93c96d8b17a47c8efbe206a76b83810115229b4cce25cf3ec03229 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpcpustrvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ed7d209b313dab73905d655785f2becd74e514e03223f0bd3b28ef31c8f4d5aa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfosintultrahacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 951f89d7d7a5c48b21857870145304ef13cf3db9b84092363efe47c53669801a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqgrandvirtualget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5b2095046ecbf80b91d48498ef90ec69a18a41dc6800099780f247aa0407ad21 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3380 Malicious code in esqrepymc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 095a097eab2f48a05502f2b72fa8c42c80cbd7957e960c326663e01a9a4bdffe EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3933 Malicious code in libcpustrmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4278a3d3d9789dde86e9c0ab80fe06604cd1d5c7c3270423fe8d4e04cfbcd1f7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfvirtualcontrolultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 255eb2423526bb6491e4902041d0a38fb5d27f4f715fb4dd5e6d197dec08d52f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4367 Malicious code in libproofcvgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bcdb36cf65002165f07c3450305ab3c66138869c7ee5c05fa89a938072c2d8d8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqstrsplitmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05b600bd6debed3817b65a67771f83bcba11cad9982ad130b1737c3f9ad0e91a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...