59 matches found
MAL-2025-6611 Malicious code in tulipgui-python (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6593 Malicious code in spl-transpiler (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6591 Malicious code in sparsezoo-nightly (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6587 Malicious code in sodha (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6563 Malicious code in phishermanx (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6537 Malicious code in localstack-plugin-persistence (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6533 Malicious code in kwargs (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6523 Malicious code in hyperon-das-atomdb (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6474 Malicious code in catchmeoutsidehawbade (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6473 Malicious code in carpentry-ci (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6548 Malicious code in memorylib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 be3ea3afb3553f67411c8bebff9d99282169997e212b5ee1dd14505d1612d551 Installing the package triggers a code that looks like downloading a picture, but in fact downloads and starts an executable with malware. Note that file...
MAL-2025-6614 Malicious code in vramx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 62a5bfc96a523ea6df6a2539bea5f16b48800c1896ef7fb2df344ed0486e6a49 Installing the package triggers a code that looks like downloading a picture, but in fact downloads and starts an executable with malware. Note that file...
MAL-2025-6432 Malicious code in anku1-rce (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 49fbe573576f7a8b2de883e6b11d60e3df40ffb8db7d62ba7f5d76a06ef4900c Installing starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-anku2-rce Reasons...
MAL-2025-6522 Malicious code in httppack (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d66d0c3948eb48c93a56872d2a149edfcc65ae57178e7d7a51405ef755880939 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
MAL-2025-6610 Malicious code in tronpyapi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3937a7f13d0db04c75985a870ed1eec73aaaff23ce5c45d9fcb64a239576cfc7 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
MAL-2025-6478 Malicious code in cloudscrapersafe (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2420d6a750823b640af4d97d3a2a26383ce9e32d3ac266e4792675e8beb9b806 During processing the user requests, the package looks for URLs related to checkouts using services: - credomatic.compassmerchantsolutions.com -...
MAL-2025-6585 Malicious code in simple-mali-pkg (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c9629656d765c03a690cd0d32598fac52e66c8f5c82dae9405280ee04e1b0280 Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...
MAL-2025-6617 Malicious code in walletsdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 24b8f8046f66b9996b1f2169f1034b1c35f0760e09d4e91e712d0b3a36a88d6e Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-6596 Malicious code in sqiul83 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 67d309c2d4c740426c07cc17768f6313eebd765242e7e4a63aa04213d21358ea During installation of the source package, it attempts to silently download and start a remote executable. At the time of analysis, the downloading link did no...
MAL-2025-5135 Malicious code in solana-charts (PyPI)
--- -= Per source details. Do not edit below this line.=-...