Malicious code in lightsequ (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 982a9ec66c32a78f5829a04aa08e2f9d29f03f317b6a69b6ae0cc1e2d8b02c17 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bytekafka-0-0-15 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4619fa745296f46998d4eb4e25a7f4841bdd8634ead366c63521d25abf739a7e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in lightseeq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d14d6932bfe1a879a7af0d37aa99c04a96678783d745e6587d5c95c39086e09 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

python311-3.11.10-3.1 on GA media (moderate)

python311-3.11.10-3.1 on GA media Announcement ID: openSUSE-SU-2024:14455-1 Rating: moderate Cross-References: CVE-2024-9287 CVSS scores: CVE-2024-9287 SUSE : 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H CVE-2024-9287 SUSE : 5.3...

Malicious Package

Overview youreallydontwantthispackage2131 is a malicious package. This library contains malicious code and was removed from the package manager PyPi Remediation Avoid using all malicious instances of the youreallydontwantthispackage2131 package...

SUSE SLES15 Security Update : uwsgi (SUSE-SU-2024:3853-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3853-1 advisory. - CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules bsc1222332 Tenable has extracted the preceding description block directly from the...

USN-7084-2: pip vulnerability

USN-7084-1 fixed vulnerability in urllib3. This update provides the corresponding update for the urllib3 module bundled into pip. Original advisory details: It was discovered that urllib3 didn't strip HTTP Proxy-Authorization header on cross-origin redirects. A remote attacker could possibly use...

bounded-prescience (0.0.3), chainer-chemistry (0.7.1) +21 more potentially affected by CVE-2024-48206 via chainer (>=6.0.0, <=7.8.1)

chainer PYPI version =6.0.0, =0.1.0, =0.2.0, =0.3.0, =0.0.1, =0.1.0, =0.6.1, =0.2.0, =0.6.0.post1, =1.3.1rc2, =2024.0.0, =2024.0.1 and more Source cves: CVE-2024-48206 Source advisory: SNYK:PYTHON-CHAINER-8340635...

Malicious code in kekiktaban (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80c5f1e8e195c782d87e63c2bfc7eac3febe17836c3d502594ea10524f97464e Obfuscated package containing multiple techniques detecting sandboxing and exfiltrating basic data to a telegram webhook, with a little other functionality ---...

MAL-2024-11620 Malicious code in kekiktaban (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80c5f1e8e195c782d87e63c2bfc7eac3febe17836c3d502594ea10524f97464e Obfuscated package containing multiple techniques detecting sandboxing and exfiltrating basic data to a telegram webhook, with a little other functionality ---...

Malicious code in pplgdfhuighsdfyisfdty2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b38f6d0da39d944ddde3bda8742a42099398148ad778fb06fe57e6a3274ea2e8 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in pplgdfhuighsdfyisfdty (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6da12f1a169dc997d18e49311bb47be99e753dca10106e2bde591c0618268d1 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

MAL-2024-11596 Malicious code in fidnffvvbfhghghhhh (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53e1b3f1fc19bbc10acfd813b8839f3831cc7624906c54a8ea4ca6a2d2706877 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in pplgdfhuighsdfyisfgfd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1b4e49a8011af86af7ac1b8cf4760295ddcf33d4b354139db3d92192e813dcc9 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in gal32fjdsbf89hnd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 289d4debca52d2f6a1dd07428abe588fa5857d09a6726740ba061b260d24de8b Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in fidnffvvbfhghghhhh (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53e1b3f1fc19bbc10acfd813b8839f3831cc7624906c54a8ea4ca6a2d2706877 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

MAL-2024-11661 Malicious code in pplgdfhuighsdfyisfdty (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6da12f1a169dc997d18e49311bb47be99e753dca10106e2bde591c0618268d1 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

MAL-2024-11598 Malicious code in gal32fjdsbf89hnd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 289d4debca52d2f6a1dd07428abe588fa5857d09a6726740ba061b260d24de8b Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

MAL-2024-11610 Malicious code in huangpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a914c7e2cc097ba21e12b61f176cefd1971bb2a38f3b5fe2e81038e143f27da9 Importing the module starts an infostealer attempting to exfiltrate webbrowsers' data to a Telegram webhook. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in huangpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a914c7e2cc097ba21e12b61f176cefd1971bb2a38f3b5fe2e81038e143f27da9 Importing the module starts an infostealer attempting to exfiltrate webbrowsers' data to a Telegram webhook. --- Category: MALICIOUS - The campaign has clearly...