Malicious code in watchitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0b2a1b7442e643963d1f4aa3fe8696741f7ed248d39effb173f8d77e37690066 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in asyncaiosignal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8c9a16c81ad4cb5cef1907d6b9e4b5b352d53a6918e702610b428a455e799a2f Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in aiosignalasync (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f77ce31a234eb422ebfaa8182ea066bd7c10c154bfefb76757b0c06bbd3e655 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

MAL-2025-2939 Malicious code in asynctestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd21bb1c5c93539b976f7a2d7083394bebaacea6ca24c52cebf7b292798158a7 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

MAL-2025-191705 Malicious code in computestpspeedcompcomp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 559d64721f5c40906b8c1ba33cf19ffb4a4ae4de9837c442be7c54a0ba1b3b6d Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in moonitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15670804eb18266dd9f95b15af455d0acc3b21b2f769ea608ea86b7265cf4326 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Protecting Your Software Supply Chain: Assessing the Risks Before Deployment

Imagine you're considering a new car for your family. Before making a purchase, you evaluate its safety ratings, fuel efficiency, and reliability. You might even take it for a test drive to ensure it meets your needs. The same approach should be applied to software and hardware products before...

python312-3.12.9-1.1 on GA media (moderate)

python312-3.12.9-1.1 on GA media Announcement ID: openSUSE-SU-2025:14759-1 Rating: moderate Cross-References: CVE-2025-0938 CVSS scores: CVE-2025-0938 SUSE : 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CVE-2025-0938 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N...

OPENSUSE-SU-2025:14760-1 python313-3.13.2-1.1 on GA media

These are all security issues fixed in the python313-3.13.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14759-1 python312-3.12.9-1.1 on GA media

These are all security issues fixed in the python312-3.12.9-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in astronomio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 083fa61d5e589b627ba6c1d6db2db22ef6df9cd06e6df5bda08120e2c65bb20d setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-1964 Malicious code in astronomios (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 44bb8480782438fda3365b0ffcc74a04ae68477448d543ae51c1744b0cdb4a77 setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in astronomios (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 44bb8480782438fda3365b0ffcc74a04ae68477448d543ae51c1744b0cdb4a77 setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in astrono2mio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-1962 Malicious code in astrono2mio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-1963 Malicious code in astronomio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 083fa61d5e589b627ba6c1d6db2db22ef6df9cd06e6df5bda08120e2c65bb20d setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in updateuuid4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c45f904631a26aae94cafeeac5ea0f7efe0fc5d4f46dea48da17dcb766111d5 The package, with an innocent looking name, has as the only functionality reporting to a Telegram channel given username and password. The functionality is in...

OPENSUSE-SU-2025:14750-1 python311-3.11.11-3.1 on GA media

These are all security issues fixed in the python311-3.11.11-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14740-1 python311-cryptography-vectors-44.0.0-1.1 on GA media

These are all security issues fixed in the python311-cryptography-vectors-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in nflx-metaflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d317c47382e978342b2098c06b1d0ff46acfefdc5a5ed6ce2b531b1f5b24fe4 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...