MAL-2025-4270 Malicious code in web3automation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09a3fb2947bb8eaaf1e65033e8ccee659633669d5de0c0456b4c2e1680317dfb Package contains just a function to send out data. It or a package sharing the same IoCs is used in a malicious GitHub project to exfiltrate crypto currency...

MAL-2025-2996 Malicious code in shleeh (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2982 Malicious code in opera2d (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-952 Malicious code in prime-math (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11587 Malicious code in fabrlce (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11716 Malicious code in sunrequests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 314b140727c2d65586134b9e2722bdbba66be25e0f391d1b886cc08824783c63 Running the module starts an infostealer attempting to exfiltrate credentials from webbrowsers --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2024-11647 Malicious code in nezur (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b50feb48c96e1118a7a347159715ad52cef02efdc463783eb9edcc5f33b6bbad Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-5144 Malicious code in whel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 556e14c71baa5758239b80d9333f83a0369b1169e63b027c50d633b97475136c Package uses the template from https://github.com/thegoodhackertv/malpip to explore building malicious PyPI packages. --- Category: MALICIOUS - The campaign ha...

MAL-2025-1970 Malicious code in deepseeek (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c082504cf7395cf145005cfa91f4c01eb9a8e1deb7b75d61f0b85b8e529ebde4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...