Malicious code in chatgpt4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a2f99d20569358bdeab51db7e4f6ea0348c87bbf832a7bc244581a472a05072 Importing the module starts shell code execution --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-6520 Malicious code in hashidf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 126b111d14601f2ff653938378c5e6d0f534439f0eac8db7984dfe7aa0f20b52 If ran as a module, the package silently starts a binary hidden in a txt file in the background. At the moment, it appears to be PuTTy, and without additional...

Malicious code in spokeo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 77e85dedb987a603a027306a57e7b988de52be0c9f12fc2a04dfacf5e3adcd19 Installing source package or importing the module starts downloading and running an external executable, which is widely recognized as malware --- Category:...

MAL-2025-6594 Malicious code in spokeo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 77e85dedb987a603a027306a57e7b988de52be0c9f12fc2a04dfacf5e3adcd19 Installing source package or importing the module starts downloading and running an external executable, which is widely recognized as malware --- Category:...

Malicious code in pythondm32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2350dbde660e08d6f97a447886432a41c60802af7e1396dabff53af3ec9091f6 The embedded dm3.1233.dll has a very high recognition as malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-191846 Malicious code in pythondm32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2350dbde660e08d6f97a447886432a41c60802af7e1396dabff53af3ec9091f6 The embedded dm3.1233.dll has a very high recognition as malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-data (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-chart (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-charts (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in requestsdev (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5129 Malicious code in requestsdev (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in requestpacket (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5109 Malicious code in dbgpkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dbgpkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in colorizator (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aliyun-ai-labs-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Fusion and IBM Fusion HCI are vulnerable to request smuggling due to python package h11 (CVE-2025-43859)

Summary The python package h11 is used by IBM Fusion and IBM Fusion HCI as part of the Content Aware Storage service and the Backup and Restore service agent and is vulnerable to request smuggling under certain conditions due to CVE-2025-43859 in h11. Vulnerability Details CVEID:CVE-2025-43859...

Malicious code in csvvv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e157e7947b2537be3a2e7840eee2fc4fad72a65954af858d89095d73f1755c03 Importing downloads and starts a remote script. At the analysis time, the script did not contain malicious code. Package description states it's a security...

MAL-2025-6490 Malicious code in csvvv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e157e7947b2537be3a2e7840eee2fc4fad72a65954af858d89095d73f1755c03 Importing downloads and starts a remote script. At the analysis time, the script did not contain malicious code. Package description states it's a security...

Malicious code in syscachelib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c8aa87f03342830d082dcfd87dfce0528b19781902f9c9e56a7379046d8a1572 Importing the module starts a UAC bypass through fodhelper to run a privileged shell, and download and execute a remote file. --- Category: MALICIOUS - The...