Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

Cybersecurity researchers have identified a malicious Python package that purports to be an offshoot of the popular requests library and has been found concealing a Golang-version of the Sliver command-and-control C2 framework within a PNG image of the project's logo. The package employing this...

New Malicious PyPI Packages Caught Using Covert Side-Loading Tactics

Cybersecurity researchers have discovered two malicious packages on the Python Package Index PyPI repository that were found leveraging a technique called DLL side-loading to circumvent detection by security software and run malicious code. The packages, named NP6HelperHttptest and NP6HelperHttpe...

Auto-GPT 代码注入漏洞

Auto-GPT is an artificial intelligence software agent program open-sourced by Significant Gravitas. A code injection vulnerability exists in Auto-GPT versions prior to 0.4.3, which stems from a docker-compose.yml file located in the repository root directory that installs itself into a docker...

Malicious code in gogogolokl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b050604c15bfdf4e456841a2cbccfb6f6122137aedf82ceae488c2871dfea27 Malicious packages campaign targeting developers, payload is hidden using Steganography, exfiltrate host information...

Malicious code in esqintstudyhacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef7a7f38147456d0eff7a537f9b0e605baf5d4c3a2e94499688c94ece57a117c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqlibcpuosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8760b4961c437a72b606af72f5988d2329ee17f72f90e126cb64f64c5f6e9212 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfcvinfoad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 934ef50eb7830e1355e375cbb3e865e916602091e5eb92946e6980facdcaa45f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfstudytoolrandom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96bf68235754ce923b2685242740d39b1a44690bd9a02dfb799923b5830fc8c2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqmasksplitpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 371a75bbb9117312cbc2dfb41f4c02a5e1378b7ca3d109a59401cc2d79619da0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpullpongpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e7b446f46395daeac2e9711ae877665037b8d78a2b8ff54d3f72737b44e3570f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfpostmcintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7305fd2b6540c38636e14b0bf103269652473848e1813ace35c2ac2d585f9a0f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqtoolvisaram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c96f70a121a08fa5e02be5a893c229900a5baa973a6bf212ca7d42e0e62a8e65 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpramcced (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7aadf6724e3fed19e833d53b352b2184bd7c77f1d91623cadd102ce5c64fa170 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfpullgamegame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dcf87bebac6d4a2016bd77895ee40bd97e6c4d8edf963045d03d0869d5929d89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqpaypalpulled (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 40be8854174f42f60e993f5443bf82c68b7cd588fd0ed83b282915a8e631f647 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpreplacepushstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 64fe7b05631fc1fba79e4844dc6dc7535c4959f19228e4930b8ad82e20d7c2a8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqcandyadvisa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 502e564581a855ca0e4cb8c13d81f3a6edba8f7e250aba0af6113d9056a939ce EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfccvmosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 735b6485ce6e3e3e9746b485812380756b59948eefcec866d751a91cc18bd1d3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqrandomhttpstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5ecb4860271b0ee8286ae981855b7aae9c4270246292eb9e1258ce6fbe97be5e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpushcvpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3d6a6024eab3fa112a7ddac38255ab67b3d392763aa28c3b0c68001ca2aa7bb7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...