Malicious code in aiogt (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-12303 Malicious code in maliciouspackage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d0e8a8d581266436f0546b5039ee82ab734d45f8489e281322dd871124dad9ce Clearly a demo malicious package, attempting to exfiltrate a token from the git config --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

Malicious code in lwplugin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c6d463791b2f4dc4cdb8a0b3961dbb9b956fc3f0e0ad974fc407211ae9d2e3a8 The attached DLL is infected with a very high detection rate --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in luna-paysure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d22eccc425ab8fc5afe244efb33dd6d500ea6bcdf0942a02dedb3daa9f17da51 Importing the module causes exfiltrating of IP and hostname. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

Malicious code in robloxrequestsss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8fb526f76dced232dadcfbfa9e2ff4e48e14d9d9600f692c08323f7c44922784 During installation, a remote, highly obfuscated script is downloaded and executed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in discordmessager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 119a7015f090394365981291b03c6f5855b4dfd33da674c238c0c4323063a32a During installation, a remote, highly obfuscated script is downloaded and executed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2024-11577 Malicious code in discordmessager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 119a7015f090394365981291b03c6f5855b4dfd33da674c238c0c4323063a32a During installation, a remote, highly obfuscated script is downloaded and executed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2024-11698 Malicious code in robloxrequestsss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8fb526f76dced232dadcfbfa9e2ff4e48e14d9d9600f692c08323f7c44922784 During installation, a remote, highly obfuscated script is downloaded and executed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2024-11599 Malicious code in gen-user-random-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4e261c26a73604aac348f2df96e5b12b0817010a9a1bbc48ddfbe309915c697b Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in user-rand-agnt-user (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e5b1f023c010c55afb11b349054c1180303197e0d411176b276d26574d891702 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in fake-usreagent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f4baefb66829fd54eeb9a557917c302ba8588059ca8483d1a56b06518d7638d4 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11709 Malicious code in sol-regex-gener (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 863af188c3f151e9ad44d0ed55e0a5faa7120032979ffcdbc822b6dd488dfc12 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in ua-agent-generator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7294a5078d47d2797cf31931252b823374b648a48534bc14b59cd73195cfe2f1 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in gen-user-random-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4e261c26a73604aac348f2df96e5b12b0817010a9a1bbc48ddfbe309915c697b Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in sol-regex-gener (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 863af188c3f151e9ad44d0ed55e0a5faa7120032979ffcdbc822b6dd488dfc12 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in crypto-regex-gener (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3236b2ded0bd62e3958fa1c6257142248c46b75e64cdd0a90edd82ffba869335 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in crypto-regex-checker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a849790638e062a67e51026ebcd7d23b06a5cb901a1b74ce74bcf09762511538 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in crypto-format-checking (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a95b535a5d579db23cf10d4a9897278238afb3093600235b1f39ddf2cca74600 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in useregent-generator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0c8bbc66c2a8384b2a35340f4e3204351fbeb78d88a11bec270f8e3e52b5636 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11564 Malicious code in crypto-format-checking (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a95b535a5d579db23cf10d4a9897278238afb3093600235b1f39ddf2cca74600 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...