MAL-2025-4255 Malicious code in verifysteream (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tronclient (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solanautil (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pythonbitcoinlib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pystile (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in py-solanautil (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4228 Malicious code in puttytitle (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4221 Malicious code in keybard (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in keybard (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in easyascii (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in evillib-cli-demo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4216 Malicious code in easyascii (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in el1t3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in colorate (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chain-validator (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ckr (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in octopus32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15fe4c8243ee2e3d9bb59df9134466819fdcb2e151cc4d79568dc4eb2dea9ac9 The obfuscated code downloads and starts a remote executable. The remote file has limited detection in VT, but contains at least code to add Defender exclusion...

MAL-2025-5122 Malicious code in octopus32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15fe4c8243ee2e3d9bb59df9134466819fdcb2e151cc4d79568dc4eb2dea9ac9 The obfuscated code downloads and starts a remote executable. The remote file has limited detection in VT, but contains at least code to add Defender exclusion...

Malicious code in ai-labs-snippets-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d5d4e1e66d1a84969c7af5822efb6e894abc0d263c87f583bf45591d216b85a During the importing, it loads a file pretending to an AI model. This file contains pickle-serialized code that exfiltrates data basic IP/username info, as wel...

QUT-DV25: a Dataset for Dynamic Analysis of Next-Gen Software Supply Chain Attacks

Securing software supply chains is a growing challenge due to the inadequacy of existing datasets in capturing the complexity of next-gen attacks, such as multiphase malware execution, remote access activation, and dynamic payload generation. Existing datasets, which rely on metadata inspection a...