7 matches found
MAL-2025-6533 Malicious code in kwargs (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6474 Malicious code in catchmeoutsidehawbade (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6596 Malicious code in sqiul83 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 67d309c2d4c740426c07cc17768f6313eebd765242e7e4a63aa04213d21358ea During installation of the source package, it attempts to silently download and start a remote executable. At the time of analysis, the downloading link did no...
MAL-2025-5104 Malicious code in coloramapkgsdow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2c07b8b1a8058a35f094f6baa72e55bca26bfb3b8bbbde78689ddf0373f698cc Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...
MAL-2025-5118 Malicious code in m5tlnyakblwa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a3cc4be569e877aa213b4747e6285f9d2d46f68ee93d55ec9fddf7949c15ff94 Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...
MAL-2025-4208 Malicious code in bytedmemfdd345 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 19705d4db8178a4b1dd1282ded6d73256dc10b22125280c241524ec3e9e274af During installation, a website with the current working dir is being called. It looks like something between spam and pentest as the website is most probably n...
MAL-2025-6430 Malicious code in alksdjpureranser (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7d4a7e9cfee7bc0812dbc2462faaa4bd791f84c5e432b0416429056fd20ec2ca Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...