MAL-2025-4264 Malicious code in web3-checksums (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4261 Malicious code in web3-auto (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4258 Malicious code in wallet-rpc (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4243 Malicious code in tronclient (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4241 Malicious code in solanautil (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4235 Malicious code in pythonbinance (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4234 Malicious code in python-coinbase (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4233 Malicious code in pystile (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4229 Malicious code in py-solanautil (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4218 Malicious code in evillib-cli-demo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4217 Malicious code in el1t3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4212 Malicious code in colorate (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4211 Malicious code in ckr (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4209 Malicious code in chain-validator (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

Cybersecurity researchers have uncovered malicious packages uploaded to the Python Package Index PyPI repository that act as checker tools to validate stolen email addresses against TikTok and Instagram APIs. All three packages are no longer available on PyPI. The names of the Python packages are...

MAL-2025-5094 Malicious code in ai-labs-snippets-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d5d4e1e66d1a84969c7af5822efb6e894abc0d263c87f583bf45591d216b85a During the importing, it loads a file pretending to an AI model. This file contains pickle-serialized code that exfiltrates data basic IP/username info, as wel...

MAL-2025-5096 Malicious code in aliyun-ai-labs-snippets-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 459b9313aa2d453392e97f619a0ffb2898c3b90700e72dcb2cde4d1a1b97b1ac During the importing, it loads a file pretending to an AI model. This file contains pickle-serialized code that exfiltrates data basic IP/username info, as wel...

MAL-2025-5118 Malicious code in m5tlnyakblwa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a3cc4be569e877aa213b4747e6285f9d2d46f68ee93d55ec9fddf7949c15ff94 Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-5103 Malicious code in coloramapkgs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c7f00bfa67a0d8743c0d46766e677dce5d28db461505c662fcb8cd9efc4b2417 Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-5104 Malicious code in coloramapkgsdow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c07b8b1a8058a35f094f6baa72e55bca26bfb3b8bbbde78689ddf0373f698cc Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...