MAL-2025-191807 Malicious code in package-346234294 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c9741d027897445cdd34a40de0f592a42641170b88a9cbab6cee3dbaaeeedb39 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in seclab-research-depconf-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 71ecf56c682dd44134d9a4d17fb2ae3d20091681372f89902c84d5dc2533c03d Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Exploit for Improper Input Validation in Jenkins

hackUtils It is a hack tool kit for pentest and web security research, which is based on BeautifulSoup bs4 module http://www.crummy.com/software/BeautifulSoup/bs4/. Usage: hackUtils.py options Options: -h, --help Show basic help message and exit -b keyword, --baidu=keyword Fetch URLs from Baidu...

Malicious code in missing-module (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8fbc5749a00c2355e50987775f1b70d9a9dbbe48b531584e5138e2d37578d648 Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

Malicious code in win32str (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 afe91149c788d349c6c0d31487fb417ce5fabc059b447dc4289b1e74f2cd161c Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

Malicious code in win32evtlogutil (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5d62d03c43564c8087172222e65beaf334bd9f219291eb6c36a142ad88adef4f Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

MAL-2025-191725 Malicious code in fb303-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9a6664f0567b6f568f8f0bef7c03491fd489eda5cf011851346f4c5e8b2a8aea Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

MAL-2025-191935 Malicious code in win32str (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 afe91149c788d349c6c0d31487fb417ce5fabc059b447dc4289b1e74f2cd161c Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

Malicious code in test_for-pentest_test_dependcie (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in test_for-pentest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-191891 Malicious code in tensorflows (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e08c37ae45b3a5d5a85a5555ded262e154d91f563636cb5b149176e1aaf12fa7 Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

Malicious code in tensorflows (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e08c37ae45b3a5d5a85a5555ded262e154d91f563636cb5b149176e1aaf12fa7 Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

Malicious code in byted-torch-monitor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8c2b83888c7fcb79b930eaecb1a538d27a131ab415c0b756f84c7071d5a0935b During installation, a website with the current working dir is being called. It looks like something between spam and pentest as the website is most probably n...

10 Critical Network Pentest Findings IT Teams Overlook

After conducting over 10,000 automated internal network penetration tests last year, vPenTest has uncovered a troubling reality that many businesses still have critical security gaps that attackers can easily exploit. Organizations often assume that firewalls, endpoint protection, and SIEMs are...

Cyver Core Reports 50% Reduction in Pentest Reporting Time with Generative AI

Amsterdam, Netherlands, 17th March 2025, CyberNewsWire...

MAL-2025-191766 Malicious code in inkpy-jinja (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c230bd12491edc91bbbc1080b2d650c4889a8b9269b85a346839a32900bfad2b Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

Malicious code in just-framework (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95cb11d9c49d15c2a3d932930ab9d4f1567e118bf2ed951ab313856878f88859 Importing the module exfiltrates basic information using DNS queries. There is no other purpose of the package. --- Category: PROBABLYPENTEST - Packages lookin...

MAL-2025-191770 Malicious code in just-framework (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95cb11d9c49d15c2a3d932930ab9d4f1567e118bf2ed951ab313856878f88859 Importing the module exfiltrates basic information using DNS queries. There is no other purpose of the package. --- Category: PROBABLYPENTEST - Packages lookin...

Malicious code in pentest-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 520906eb0ad37fc18cd5eb9f85d42fab4f8c71e45efb63e0a705a7bd16b49799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11212 Malicious code in pentest-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 520906eb0ad37fc18cd5eb9f85d42fab4f8c71e45efb63e0a705a7bd16b49799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...