MAL-2024-11677 Malicious code in pysolara (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 349cad70487c67d06c267c1bf8200b6ffd83ae0d0d1eeb8be9b80bd93b2c154c Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in discould (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bb38a630a1e0c6e81089ebb95d407d438c932c26527fde69e9c304305d267ca9 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pysleek (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebcd258899197196fca41e03c7a6781f5087b42fd37c0276ae9a892bef8d4910 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in artindex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f19c3c0f0a7d0edd2a53f7c3879706561e0e7d4596b11e9eebbb1d896e90a46 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11670 Malicious code in pycordapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 577f50cf18141b14ac9a078d8c777f738c62cebdb4ff8b5b00c6fdb38812acdf Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in rolib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b16e729f1b088aa209bed8297f772d9b51eccf7c434e2a3b8aa3ff43f17f565e Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in dahood (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b9cc2a4186b5ad68e11dc68aa719583b8f3a746c9f13b8b3b950f9653df0e909 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pymatcha (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 779c6dd8d3b44cbb116c534cbd88dd2a73e5ee6f946e7e37c66f7eba13dedefd Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in haaahhaha (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c8c6599371614e7710276d1475abae424b77a913aed8885e7191b0db82d96e40 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pytrv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d2f680e10e34dddd65afc0a09e3bc0c05dfb8cbaa5f02f5f0eb6ece5848498f0 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pytkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9a84a25f2ecd00da29cb51692121d6ab49559ebdee41aff7ab463020612c5167 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11711 Malicious code in solaraund (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e54b1521b270ef90ecd30f1d3a59dfcf3027ce2a7c1637d45a8ac2a6e82aa929 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in lowui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c4ff92d988d3a1a5ad5fcec02556f08824926948c8d12fc1dba370a99b5e4b70 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

MAL-2024-11660 Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

PT-2024-40522 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: Exotel affected versions not specified Description: The issue concerns a compromise of the Exotel project on PyPI through a phishing attack, leading to a malicious release that downloads and runs malware during installation. This affects...

Malicious code in flophttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45ad705b0505a09a4123e74a68d03c4a16dd91604a6d9ab323eb0d776320f68a In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in utilhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f91f83da1ea0307373682776ad3de3a3fd320d57280f40fa82f47aaf316d3062 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in asyncmodules (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4089e0f824ae366e1e3e128e2213a6700d6bddea0b9209fd426148a0792edd53 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in assulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 86723cbd5b75cbf26ac4ec2f1dc722c282d7f2df07909a7d7a4ee4c07819d3bd In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...