9321 matches found
EUVD-2025-202464
Malicious code in loguru-utf8 PyPI...
Malicious code in kzip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7a81e0fa699edbad810083efb9de4e22f5088c31c22fdf71f7e519269dc5ad01 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...
EUVD-2025-202410
Malicious code in kzip PyPI...
MAL-2025-192432 Malicious code in kzip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7a81e0fa699edbad810083efb9de4e22f5088c31c22fdf71f7e519269dc5ad01 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...
EUVD-2025-202411
Malicious code in bigpyx PyPI...
MAL-2025-192430 Malicious code in bigpyx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7a1bcd636394f1505534cf691576b00e8686aa14474e8a209c94f8213310b128 Continuation of the campaign with a slight different obfuscation of the malicious code, but there seems to be no difference in the behavior. The malicious code...
EUVD-2025-202330
Malicious code in helloharry123c PyPI...
Malicious code in ajenti-plugin-testing-pyld (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8f75e248c6b93183d9fb3295781e0ffda38ca1afa25cefb866205312f2a78cfd Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
EUVD-2025-202304
Malicious code in ajenti-plugin-testing-pyld PyPI...
EUVD-2025-202181
Malicious code in bignum PyPI...
MAL-2025-192391 Malicious code in bignum (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 251c8009e3a70f8c3a3a8283dc7f2b603838ec892d7773f0b4886122ff0d97c5 In this incarnation, the package is no longer a clone of networkx, but continues to use the same technique to run secretly remote code and cover tracks ---...
EUVD-2025-201914
Malicious code in do-not-install-this-package-001 PyPI...
EUVD-2025-201907
Malicious code in telcoo PyPI...
EUVD-2025-201908
Malicious code in graphsync PyPI...
EUVD-2025-201887
Malicious code in raft-dask PyPI...
EUVD-2025-201857
Malicious code in sketchfab-spinner PyPI...
EUVD-2025-201711
Malicious code in graphnode PyPI...
EUVD-2025-201590
Malicious code in python-tg-bot PyPI...
Malicious code in telco (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 55c8199592663c3f388cba22988800084bbc3a5696279eb22c53e837c1d8ac40 Running the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-evil-rce...