Malicious code in reverse434343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9107d563a329f12fdff39bb22f6d6593f6d005d38f9738c2d3a78c94ee368262 The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in reverse4343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a90c21a3dc6b4091f1ccd6f17c99b1ec955954d2b78e93029e63c33f12ed3c7d The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11694 Malicious code in reverse434343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9107d563a329f12fdff39bb22f6d6593f6d005d38f9738c2d3a78c94ee368262 The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11582 Malicious code in eosio-signer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 647b75de784ff7b23edb8a5b76d1a017b02d1fd719c6a5a92587fa8d89c25abf Installing the package exfiltrates basic data about the system --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anythin...

Malicious code in tingetone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 014c881ede6ff27565f1de4842b4f7c10162a2daa47c98a4470188571a60639f Importing the module starts the banner function, which downloads and runs an obfuscated remote script. The package seems to be a clone a one of existing simila...

MAL-2024-11727 Malicious code in tingetone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 014c881ede6ff27565f1de4842b4f7c10162a2daa47c98a4470188571a60639f Importing the module starts the banner function, which downloads and runs an obfuscated remote script. The package seems to be a clone a one of existing simila...

MAL-2024-11530 Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

MAL-2024-11611 Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

Malicious code in next-vit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 73640a478461ae5d518554306c8634153281076132c77533736ec77d96230834 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in type-extension (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d68be7ebeb4e06c6e29be15274785ff085ea469d680f831c9d40a4dc3b54e8c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in cryostar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 39520a855c6461c283336952541617a0cc7386d123941cb8290229a1793d3599 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in textharmony (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a225b73c6a06e67b7911b74dae2bd28201575919bbcfe2cde0ad1a2a0b57aee6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in deepsolid (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bd495f31431e621d5ce9440e408d5b86e69cf6545ab1cff1eff26ff87b0a4d08 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in oclip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc21e51bf306056c1f7386f6e7baeeec043f05fad768571f28624da41dd7b038 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in netobs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 14480b5317baa8a903d35907265eac5d1e36af264c893920ac52fff04a106359 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in pytorch-lighting (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62c64e574f5ad4d75ebc2c82d4cc48edb6185486f8379bfd2a7bd330ce94f50e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in pyyal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 85587f160dc4e7bcc19305fd294a77bf8256a3efb5e70b8ec84c94994edfb2a5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in portrait-mode-video (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a190c4d5edfd5b62c66980ec343cc41b020860de69839b9e8507217d00630bd8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...