New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

Cybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware. The malware, introduced via a change to "lib/commonjs/index.js," allows an attacker to run shell commands, take screenshots, and upload files to infected...

Malicious code in pyximport (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4495a2909bdab391f460c6671937fa60d164f745657520e43700b229f56faf0a While described as telemetry, importing the package attempts to send out some basic info as well as quite sensitive environmental variables. --- Category:...

Malicious code in atlasctf-21-prod-05 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7e008f819b27019b178836f9edea97e159c3c1f765d391800ea99f06a26ce20a On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

MAL-2025-6441 Malicious code in atlasctf-21-prod-04 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 001a32ea254df328ea468b5f678beeac998089d5d28d365d4bd412f5b6839267 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

MAL-2025-6444 Malicious code in atlasctf-21-prod-07 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1311c7427b70eb825aa126794cd4b42d09c2e5775ceb1abbcb909f7a36bc22ec On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

MAL-2025-6446 Malicious code in atlasctf-21-prod-09 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3791e0b9977aa586d7ba5a0d388c28defe71ad86cb90f61d599f85d0e9584f73 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

MAL-2025-6447 Malicious code in atlasctf-21-prod-10 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8cf35ee49ac01d6c8e0fa0ea6dcb0beaadce7091fe25be81c878fab6a0dbc419 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

MAL-2025-6452 Malicious code in atlasctf-21-prod-15 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 101bfa86fba4ba58c3e91f1094d96934acad78a88046c5482a16e3ab969ea545 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

MAL-2025-6455 Malicious code in atlasctf-21-prod-18 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 72fd975d0315a84c767eec715b401f9e6c3a3345b6f7ae0ed2ee435634fdf8af On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-00 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 14e4ae78e884590292b3a8ef6ebe2093e02ffc05d89f37718d9f2573e8a9e5e0 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-01 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 258b21be0ec08a121a4b506eb1cc9409d08b0cfecc9a2b995181dee57254afc7 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-02 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 797236959adb77b5a2b6d687ba0dcd688ea1fff675136998f38fedc01c65fa89 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-03 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 374fe69b5719748c5255c0665469e0e45e3064884ece003a7fbfc56c04d3a93b On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-06 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 40700739340f4f0bb3e0439a94754cb868827b002cad84a1dfca90da1dfa032d On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-07 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1311c7427b70eb825aa126794cd4b42d09c2e5775ceb1abbcb909f7a36bc22ec On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-09 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3791e0b9977aa586d7ba5a0d388c28defe71ad86cb90f61d599f85d0e9584f73 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-10 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8cf35ee49ac01d6c8e0fa0ea6dcb0beaadce7091fe25be81c878fab6a0dbc419 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-11 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ece7411f662f1c3b05a8f6bbda7c94099f1e20acc383cefb69bc8195da83e86a On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-13 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 773b90b87addef84f41e3bec0ed50198f5217f97c58686c8700726e2c5911f39 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-14 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53e97c9ccd81536ef4d3b1aacb14600cc31b01f8bf00b53326458e485459c7e4 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...