MAL-2025-975 Malicious code in reqzest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32fb197467e37327d9d2b079a85faa4ffffa0cdc05c9703957a9f36de8f453e6 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in reqzest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32fb197467e37327d9d2b079a85faa4ffffa0cdc05c9703957a9f36de8f453e6 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in falask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95241c523519ca2e69e19dc499161e38f895f76fb8f76114acf4d583d8288d66 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in requeszs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8c95a5f64dd212c781d6b3c45eb03f38bcf5220f688c4d903e9bfca20911b62 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in flasl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15f6805748d19912e476158c87c5c50c0f8b50bdfa82d8c6e24d996e7c38880c Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in filecraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d0eec02526b659b5e856c211e05be1842dc283ed0b7d07dc90574ea5c7dc34a During the installation, the package iterates its files and attempts to import a hidden module - which is embedded as ZIP archive in the image file --- Categor...

MAL-2024-12272 Malicious code in filecraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d0eec02526b659b5e856c211e05be1842dc283ed0b7d07dc90574ea5c7dc34a During the installation, the package iterates its files and attempts to import a hidden module - which is embedded as ZIP archive in the image file --- Categor...

MAL-2024-12282 Malicious code in handyfiles (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 381cd796d4e5fce8fb62c337374b5303e0b2466d67467efc95cbc4d7d8248dd4 During the installation, the package iterates its files and attempts to import a hidden module - which is embedded as ZIP archive in the image file --- Categor...

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python Package Index PyPI repository and came fitted with capabilities to exfiltrate sensitive information from compromised hosts, according to new findings from Fortinet FortiGuard Labs. The packages, named...

Malicious Package

Overview zebo is a malicious package. This package steals information from the victim by logging keystrokes and taking screen captures, which are exfiltrated to a server under the attacker's control. Remediation Avoid using all malicious instances of the zebo package. References - Fortinet Report...

openSUSE Security Advisory (openSUSE-SU-2024:0412-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:4393-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:4396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-be6ea1ce44)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:4358-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: python3.11-urllib3 security update

An update for python3.11-urllib3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Malicious code in utilitypyfunc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2aaf64ae76493cf55c8b9e418bc3408f9e309b5c6a590a2ad528beb5ae8dbcc0 Importing the package starts the thread that gets and executes code from the remote server. The package description suggests a rather spam than malicious...

Malicious code in discordbotpresence (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feb07b6deb53d133f7121c755a98920d1753dd75c4099e51e4dcb84d650d84fa Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...

Malicious code in discordbotstatus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2dbd628d2baf4f55c8f9c9dcd441ae7deeee86379f73dd79beb48e41d4bfbe8f Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...

MAL-2025-920 Malicious code in discordbotstatus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2dbd628d2baf4f55c8f9c9dcd441ae7deeee86379f73dd79beb48e41d4bfbe8f Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...