Malicious code in asynhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 058c3bab076ccb770a3ecaefbdb301df88bd935a79f154cdeb329c51c4a1eef5 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

MAL-2025-191619 Malicious code in asynhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 058c3bab076ccb770a3ecaefbdb301df88bd935a79f154cdeb329c51c4a1eef5 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

Malicious code in libtasnl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0da2df30cd680f292df7b195f51829e4afc94604336223d58b0bfca92714d9fc Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-191645 Malicious code in libtasnl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0da2df30cd680f292df7b195f51829e4afc94604336223d58b0bfca92714d9fc Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-191641 Malicious code in installyoura (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ce9e3e9d41cbe7a819ee558b5d69ee8b77d3cbfbf54a5d8167500266dfdca903 Package download and runs widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

EUVD-2025-26370

A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etcro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials. The attack can only be executed locally. A high...

MAL-2025-191666 Malicious code in yelp-pkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fdea5ca17bb09234a292159e525a2a38ac3fd43760c6f2184aa27f563f320075 During import, the package attempts to exfiltrate potentially sensitive data. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in huzzleuo130 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 85df7f2dfe2955a251c0e1858049dab9b978d9812a067235cb04c6ffb25131fc Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in humunculous5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 653da18ccefceb9c2bc1dc858e100bcc242e88b449225e1c9337487da1af3826 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191634 Malicious code in humunculous5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 653da18ccefceb9c2bc1dc858e100bcc242e88b449225e1c9337487da1af3826 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in rando0192490 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d5805a2205690aef1009d3bec77df6c20de9d16fc8744b8e44f279bcc2ddab8 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191655 Malicious code in rando0192490 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d5805a2205690aef1009d3bec77df6c20de9d16fc8744b8e44f279bcc2ddab8 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in humunculous59101 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a91be6e2afb95f2eeaf8f48eb0bf62bf737ba21ae56aee91c4c75c27a5ba21b Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in humunaiodio2443 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0f8b15e18af91c7aa7c9b3de3f2a24c1dcdca73d75acffdd2c8b6650d1c13657 Package imitates Roblox API wrapper, but the only action is getting the public IP, suggesting it's a security research or malicious attempt --- Category:...

MAL-2025-191633 Malicious code in humunaiodio2443 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0f8b15e18af91c7aa7c9b3de3f2a24c1dcdca73d75acffdd2c8b6650d1c13657 Package imitates Roblox API wrapper, but the only action is getting the public IP, suggesting it's a security research or malicious attempt --- Category:...

MAL-2025-191664 Malicious code in unclesky5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a6db403a22b058f1960f850fb70b353baeee04b4fc240846549f33ef355ef31 Package imitates Roblox API wrapper, but the only action is getting the public IP, suggesting it's a security research or malicious attempt --- Category:...

MAL-2025-191636 Malicious code in humunculous591014 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c11577c61879e85aacda7ebb86fc8450c95b08a151e6a058b5ccbec46616c42d Package imitates Roblox API wrapper, but the only action is getting the public IP, suggesting it's a security research or malicious attempt --- Category:...

Malicious code in humunculous5910145 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42aa1f0acca970dd3dd66bb2d709b7afadf6b3f70f24992dc69c5254482604f1 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191637 Malicious code in humunculous5910145 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42aa1f0acca970dd3dd66bb2d709b7afadf6b3f70f24992dc69c5254482604f1 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in kirux189894 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f147ce226cffa7d6f6b34db801242958dc198c8d18c01cef735b65439dae8678 Package simulates malicious activity during installation and has no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest package...