MAL-2025-6484 Malicious code in cppython-core (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6481 Malicious code in common-test (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6476 Malicious code in chalk-harness (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6475 Malicious code in celery-flower (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6474 Malicious code in catchmeoutsidehawbade (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6473 Malicious code in carpentry-ci (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6467 Malicious code in boto3-batch-utils (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6466 Malicious code in bmlx-openapi-client (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6464 Malicious code in blackspammerbd-termux (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6463 Malicious code in bitranox-coloredlogs (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6462 Malicious code in bioformats (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6461 Malicious code in bavard-ml-common (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6429 Malicious code in aistac-foundation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-191689 Malicious code in backtradingbot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 117c24f5b7a0f5e4921e4478231a717ecca01748a5b266d8984e619f06173984 Running the installed entry point downloads and executes remote code. During the analysis, the code was switching to websockets, adding a startup script and...

Malicious code in backtradingbot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 117c24f5b7a0f5e4921e4478231a717ecca01748a5b266d8984e619f06173984 Running the installed entry point downloads and executes remote code. During the analysis, the code was switching to websockets, adding a startup script and...

MAL-2025-6787 Malicious code in flatfox-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c1abb243ceb7b5b94ca2f950d7cf27838ad4c22bc9771a0ea878af5497bfebf2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain

The maintainers of the Python Package Index PyPI repository have issued a warning about an ongoing phishing attack that's targeting users in an attempt to redirect them to fake PyPI sites. The attack involves sending email messages bearing the subject line "PyPI Email verification" that are sent...

Malicious code in hello-from-shiphero (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 00eb05ac59ee167606a053bd1ac9f705de178f9a576e6fe78bae415d599157b1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-191821 Malicious code in prof-qux (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5b87af8d8f13bd43c1cf3490ea551b8d60fe05a482875597ef2fe5d2c200ca19 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

MAL-2025-6010 Malicious code in ruamel-poc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1381375ccfff8dc10b3416284ac4a9a91c69bb2d5e7b652a2df24a64f4c5d512 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...