33 matches found
MAL-2025-6625 Malicious code in zlapp (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6553 Malicious code in myfuntools (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6504 Malicious code in fastybird-triggers-module (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6464 Malicious code in blackspammerbd-termux (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6541 Malicious code in malimalo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3b4acdcbd7f8ae1e20019b3c0126a4b5bac73cb07a6bc4c0c3a024bc2a390b34 The only goal of the package is to execute a webhook or a suspicious file during installation. Closely related to 2025-07-0x9xnx - created after previous...
MAL-2025-6615 Malicious code in wallet-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c83a3acdf0b02acc2a9af7cf885f2f744a154847edc66e1264ee1c38d8d7b984 Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-4233 Malicious code in pystile (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-5140 Malicious code in trongridlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 810f3d44ffd0654acef07cf5bc57e4c1c8daa207332751a60c14f29f64832560 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
MAL-2025-4246 Malicious code in tronlibpy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3830f2a3daeaf5ef1da928f6700860805f4fb3b0f955ab814f4742b334ca7868 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
MAL-2025-4272 Malicious code in web3yrpcs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 171ec4f4bbfb34688348ecdda292249487574c8fb28caf8467c0bbafb1563cb7 Package contains just a function to send out data. It or a package sharing the same IoCs is used in a malicious GitHub project to exfiltrate crypto currency...
MAL-2025-4203 Malicious code in aioasyncsqlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9dabf7e852a633394c9df21ee491c5a3582e2c172c624fd2b48cc127dbdc410a Clone of aiosqlite with hidden exfiltration of selected data during "executeall" query see L59-97 --- Category: MALICIOUS - The campaign has clearly malicious...
MAL-2025-3461 Malicious code in quickcolors (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 05deb6781dc1a1781e9a811200127704052a70029ade2a3e97f2c010d9453fc2 Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...
MAL-2025-3008 Malicious code in tlsclient3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 612e1a598a61304a9ae3550acb835ef5962f596bb74e857c2a035ba090e57dc4 Obfuscated code starts a multi-stage infection --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-996 Malicious code in tonki (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-921 Malicious code in eth-web3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11733 Malicious code in treadtools (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11697 Malicious code in rkpairip (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11648 Malicious code in notoken887 (PyPI)
--- -= Per source details. Do not edit below this line.=-...