13223 matches found
python-zipp security update
3.20.1-2 - Make package buildable for epel=9 3.20.1-1 - Update to 3.20.1 rhbz2307990 3.20.0-1 - Update to 3.20.0 rhbz2304028 3.19.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora41MassRebuild 3.19.2-2 - Rebuilt for Python 3.13 3.19.2-1 - Update to 3.19.2 rhbz2290429 3.19.1-1 - Update to...
Malicious code in binance-sdk-ebate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 43db9ff01b53b59066c74bb7571e281c1364444174851bd25c272e8fd7f3f503 Example of typosquatting package, with rather safe using localhost as exfiltration target. Package targets a typo in the Binance documentation:...
MAL-2025-47747 Malicious code in binance-sdk-ebate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 43db9ff01b53b59066c74bb7571e281c1364444174851bd25c272e8fd7f3f503 Example of typosquatting package, with rather safe using localhost as exfiltration target. Package targets a typo in the Binance documentation:...
Malicious code in flatfox-api-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6973 Malicious code in flatfox-api-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-47801 Malicious code in svcmanagement (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7b2d49c3d45535d0e8d20f097496169af472ef9fe2612c83823102820542590e Package attempts to download an executable and install it as a privileged service. The executable seems to be modified remote access tool --- Category: MALICIO...
Malicious code in svcmanagement (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7b2d49c3d45535d0e8d20f097496169af472ef9fe2612c83823102820542590e Package attempts to download an executable and install it as a privileged service. The executable seems to be modified remote access tool --- Category: MALICIO...
Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks
Cybersecurity researchers have discovered a malicious package in the Python Package Index PyPI repository that introduces malicious behavior through a dependency that allows it to establish persistence and achieve code execution. The package, named termncolor , realizes its nefarious functionalit...
MAL-2025-6897 Malicious code in swiv (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 945d4a5f54e77ae66588b5b64aa30eb2627903bffcb72a3031b9c4b6b2122b43 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-191732 Malicious code in flask-tdg-cyberx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...
Malicious code in pytensorlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 188201cba6b48f33920bc11fd719f4dcc6a78b6ca0e1c038f6a950027522cbe2 Importing the module downloads and starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-47795 Malicious code in pytensorlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 188201cba6b48f33920bc11fd719f4dcc6a78b6ca0e1c038f6a950027522cbe2 Importing the module downloads and starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-47803 Malicious code in titifel-pyip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db04496b1d3e7bb6d0e4f13530466504551bf243744fb5f0748195d38a11b0f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in titifel-pyip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db04496b1d3e7bb6d0e4f13530466504551bf243744fb5f0748195d38a11b0f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-47783 Malicious code in libgomp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d390b58898a977fec39e6d1fe725cf5c2bcb09b2ecf4c2294a23d75a56dd71a6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in libgomp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d390b58898a977fec39e6d1fe725cf5c2bcb09b2ecf4c2294a23d75a56dd71a6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in iamenumerate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554 This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed no other changes. It is anyway...
MAL-2025-41688 Malicious code in iamenumerate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554 This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed no other changes. It is anyway...
MAL-2025-191767 Malicious code in jsonist (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4c74a199a696dbc18994242bc3c29e9a018ddda51fa2bbe224620d9ded6f1818 Calling a method starts downloading and starting an infostealer script --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...