MAL-2024-11727 Malicious code in tingetone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 014c881ede6ff27565f1de4842b4f7c10162a2daa47c98a4470188571a60639f Importing the module starts the banner function, which downloads and runs an obfuscated remote script. The package seems to be a clone a one of existing simila...

Malicious code in backwwi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 23f7db675ae2d9beeb90ac31070aeb2a2ca9902ae348f92b30f828c200cc3441 When importing the module, the obfuscated code downloads and runs a remote executable --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in fabrice (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d1d6b36980b1999e5525b7490b4a430c21cb4f86493a11b76f34ae8c02bfc19c The PyPI package fabrice is a malicious package typosquatting the legitimate package fabric. The package is an info stealer primarily...

openSUSE Security Advisory (SUSE-SU-2024:3964-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

MAL-2024-11530 Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years

The malicious Python package "Fabrice" on PyPI mimics the "Fabric" library to steal AWS credentials, affecting thousands. Learn how…...

MAL-2024-11611 Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

RHEL 8 : python39:3.9 (RHSA-2024:8977)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8977 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

CVE-2024-51751 Arbitrary file read with File and UploadButton components in Gradio

Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary file...

Malicious code in imagedream (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ba26adf35a532efc43aaf6d02cfffcde0e314357e49dfc4ee421dacb1bd41c56 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in compresai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eff61bf37f16806690cbf9520f29f4e65c1619fb07bf01ccbb8c3c830f501736 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in imagedreamfusion (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6d6718a5b7231657a334b5a35b2053de510f4c15bdf137085121d29b5086121 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in pytorch-lighting (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62c64e574f5ad4d75ebc2c82d4cc48edb6185486f8379bfd2a7bd330ce94f50e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in shot2story (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b1cb3804872d11b7f51bfc5588086dcdf5d8b68905b353e7b619ce55bfdf28a0 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in torchvisions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 51134ba41129052e6c7163c273094867918aff7ffc9579a3834f3febb74b44d7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in zero123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 af7d2c3f3831618ff17940011336fa3910db4cc1a28c37a7a8892fbfd8aac854 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in licensemonitor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6bf006c4d28ae3036555f2c7255de1d0f672d7992acb46f2a89b4068b86f8754 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in byteff (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a56aa5a63bf5b3ed081b62351f3aedb42fd6c2e834ab240922247add79aee664 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...