MAL-2024-10877 Malicious code in newpipv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54fac2a807bae6742d82c86f55d97a1b4a810e42ee3b0b9dcb0c981c36ab712d The OpenSSF Package Analysis project identified 'newpipv3' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-11537 Malicious code in blackamerxs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 50486a7fa5636706a3c90bf515f6664c6cbb11aa127f9b3e95d7b38cf89c80c8 If run, the code in the package exfiltrates all files from the current directory tree. --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

MAL-2024-11693 Malicious code in reverse4343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a90c21a3dc6b4091f1ccd6f17c99b1ec955954d2b78e93029e63c33f12ed3c7d The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11534 Malicious code in backwwi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 23f7db675ae2d9beeb90ac31070aeb2a2ca9902ae348f92b30f828c200cc3441 When importing the module, the obfuscated code downloads and runs a remote executable --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2024-10573 Malicious code in fabrice (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d1d6b36980b1999e5525b7490b4a430c21cb4f86493a11b76f34ae8c02bfc19c The PyPI package fabrice is a malicious package typosquatting the legitimate package fabric. The package is an info stealer primarily...

Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years

The malicious Python package "Fabrice" on PyPI mimics the "Fabric" library to steal AWS credentials, affecting thousands. Learn how…...

Malicious PyPI Package 'Fabrice' Found Stealing AWS Keys from Thousands of Developers

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI that has racked up thousands of downloads for over three years while stealthily exfiltrating developers' Amazon Web Services AWS credentials. The package in question is "fabrice," which typosquats a...

Malicious code in compressi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ade0c38afdca5e7d87d6c3ecf059ed4a65e27587be0bff2287cbf4aa3474b536 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in kera-preprocessing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 973d4eb03e9256234b20a9fd346a83f5ddced04587ffbf9a7b9762fbe15a1231 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10591 Malicious code in distpro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 de27f9cd4056d9690ff7216c49b592b22c4059955b71708cf12783c072da64da A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10831 Malicious code in x-portrait (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4f777ad032311636320b36bbc92cf2afaf1242290af10cbd15747c66836d8c13 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10582 Malicious code in ic-flows-platform (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7ddd18ddba219f2d0fe4c9bceab7e456d97d23dd4ba95b9cecd06bffecef2bef A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10597 Malicious code in para-gen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b3d08fbd0f121caa044ad303a9e0c91c40edb96d35166f220961b594eda2aea3 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10644 Malicious code in openfermionpyscanf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eb5fef6cf1c79b7e945198aa689490c004a9b1c400642cece5597b6b7b02bf71 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10446 Malicious code in bytemlperf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 abcc70611e2d35cabe7d6a6f7e88ff8f9fab7d9e2a42b0fc3c0d1f036c8582be A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10451 Malicious code in hllm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c984c02970a9295543df7e945c9aa0ab34b1102216b42ef189fa6d626274a00a A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11643 Malicious code in mvdream-threestudio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 609ae3c19c5da8545336e0466e565db2d2ff6590b1a3bc1a089f3614344969b8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11544 Malicious code in byted-flex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7c46f02d189ba471aba10b985193a2e0476f4f7f9f6e068ddf3fe79c2088ea1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10825 Malicious code in lapnet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 307a1f48007c80dd0a32f9487bc91bd1d12602c53b4942e5826724e659929f44 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10733 Malicious code in typing-extension (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a4f2379794c21a682400394b2df6d8b9e278128bf36a6c23dd342fec8bf332a5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...