MAL-2025-191915 Malicious code in ultrafasttelethon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 73a960b0cd2d21f8bde61f22f956a4c2a02ccddd9e1277eef23d3d8e0406cba4 Clone of Telethon package that exfiltrates credentials. See client/telegrambaseclient.py L608-626 exfiltration function and client/auth.py L163 usage. ---...

Malicious code in colorinsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea605189c0cea53175b8c70e9163dcc15333629a93b9ea991d154486c931950c Using the color function triggers attempts to exfiltrate browsers data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3442 Malicious code in colorinsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea605189c0cea53175b8c70e9163dcc15333629a93b9ea991d154486c931950c Using the color function triggers attempts to exfiltrate browsers data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in runningwifi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c510d8dbbc3448272c337960c786b9b9731fe97773a4bfd48844527c7e6bed6 Running the module will exfiltrate files from the current directory --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in sccket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a4f6b8eead6d682b7462da07822a284425fa81c17b9493dd8702ba6a8e5fbb7 Running the module will exfiltrate files from the current directory --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in randomwifi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 69dd88ab3dd3a84c89517f453703ddfd713ccc663b6641d5cf098e17bcdfe500 Running the module will exfiltrate files from the current directory --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3469 Malicious code in sccket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a4f6b8eead6d682b7462da07822a284425fa81c17b9493dd8702ba6a8e5fbb7 Running the module will exfiltrate files from the current directory --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3463 Malicious code in randomwifi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 69dd88ab3dd3a84c89517f453703ddfd713ccc663b6641d5cf098e17bcdfe500 Running the module will exfiltrate files from the current directory --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3468 Malicious code in runwifi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83046dbbe0f24ed7ffb9087d78c161e332436c45f2f3f4433606ebb9fd9cc52d Running the module will exfiltrate files from the current directory --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3437 Malicious code in bitcoinlibdbfix (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a5cb52fa4f2ac6a68416c59a513399e01bb388d5e238260b712a513db3d97233 It overwrites the 'clw' command from legit bitconinlib package and attempts to exfiltrate its database on the usage. As a context, it appears to be created to...

Malicious code in textgradient (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7fe681cdeb2892cd4e567b4ac8aeb6e0eb22885cce024238e010af54711831ec Highly obfuscated code that during import downloads a remote script with another obfuscated code. The repository with remote script also contains clearly...

MAL-2025-3473 Malicious code in textgradient (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7fe681cdeb2892cd4e567b4ac8aeb6e0eb22885cce024238e010af54711831ec Highly obfuscated code that during import downloads a remote script with another obfuscated code. The repository with remote script also contains clearly...

Malicious code in ytest-cov (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in utilmy (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3013 Malicious code in utilmy (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in torahbiblecodes (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tempeh (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3007 Malicious code in tempeh (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3003 Malicious code in sphinxcontrib-napolean (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solscan (PyPI)

--- -= Per source details. Do not edit below this line.=-...