Malicious code in atlasctf-21-prod-05 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7e008f819b27019b178836f9edea97e159c3c1f765d391800ea99f06a26ce20a On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

MAL-2025-6444 Malicious code in atlasctf-21-prod-07 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1311c7427b70eb825aa126794cd4b42d09c2e5775ceb1abbcb909f7a36bc22ec On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-14 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53e97c9ccd81536ef4d3b1aacb14600cc31b01f8bf00b53326458e485459c7e4 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-10 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8cf35ee49ac01d6c8e0fa0ea6dcb0beaadce7091fe25be81c878fab6a0dbc419 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-13 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 773b90b87addef84f41e3bec0ed50198f5217f97c58686c8700726e2c5911f39 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-11 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ece7411f662f1c3b05a8f6bbda7c94099f1e20acc383cefb69bc8195da83e86a On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-19 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74537e0fdc55a5f9c24996d74d6a582f0bac3c796e4629c46d8803a956647d87 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-20 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ffe859775c26074cc4af620ba898f558fb64310ff0cd6ac1cb212700fadcb182 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in atlasctf-21-prod-03 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 374fe69b5719748c5255c0665469e0e45e3064884ece003a7fbfc56c04d3a93b On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

Malicious code in pyobfuscation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f8e00692944f5cafaa4c7fdb9974554f20629bd4581e2c68baa5f1b0ca675def During installation, an executable is downloaded and started. It's been identified to contain Brute Ratel C4 components --- Category: MALICIOUS - The campaign...

Malicious code in discord-booster (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f561c13e7822efe2d480bce32956c66b8eaabe69e40665997628b7b927e4e763 Code downloads and runs the remote executable. While the current link seems not to work, the previous versions had an embedded infostealer instead. --- Categor...

Malicious code in alpha-booster (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8fe7614b282cfa81278bc61bde1998e286fe7554c1d37b4c3185718c6e54f6af Code downloads and runs the remote executable. While the current link seems not to work, the previous versions had an embedded infostealer instead. --- Categor...

MAL-2025-6431 Malicious code in alpha-booster (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8fe7614b282cfa81278bc61bde1998e286fe7554c1d37b4c3185718c6e54f6af Code downloads and runs the remote executable. While the current link seems not to work, the previous versions had an embedded infostealer instead. --- Categor...

MAL-2025-6495 Malicious code in discord-booster (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f561c13e7822efe2d480bce32956c66b8eaabe69e40665997628b7b927e4e763 Code downloads and runs the remote executable. While the current link seems not to work, the previous versions had an embedded infostealer instead. --- Categor...

Malicious code in fernetpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ccbbcfd921dcefb2809ba41756181682f7a04f1a9f701adcf0c37c9889d87a98 If imported, the module starts a multi-stage infostealer, exfiltrating browser data as well as crypto wallets, and also attempts to monitor clipboard looking f...

Malicious code in pyfernet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a2f90c0e3c6e46456cd3e319aaaf4a7b53475a554a997a964fdda898e85fcd0 If imported, the module starts a multi-stage infostealer, exfiltrating browser data as well as crypto wallets, and also attempts to monitor clipboard looking f...

Malicious code in matplotlibe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 082b8eb9ac76b7c5ec057f8c5f0aeff99b84841c33c50fb570874ff4e435375a Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

Malicious code in tensorflows (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e08c37ae45b3a5d5a85a5555ded262e154d91f563636cb5b149176e1aaf12fa7 Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

MAL-2025-191786 Malicious code in matplotlibe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 082b8eb9ac76b7c5ec057f8c5f0aeff99b84841c33c50fb570874ff4e435375a Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

MAL-2025-191891 Malicious code in tensorflows (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e08c37ae45b3a5d5a85a5555ded262e154d91f563636cb5b149176e1aaf12fa7 Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...