Malicious code in selfpyintpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13bec999a49bf9dee37e242115164d05756af19ea57d26d0b54b4c67c1f01571 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqgameencodereplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a52a247b3876e80074ffdc24a1731191f9a280dcccbba73c0090e5f2aeac4ac2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpipultravirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7fcc0ea3b75f3b40abcfb64156cfe1244cf729c1511a1e325ca450c73a7ee9f4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in sagemakertransformers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c11f5b4aed6b109392ec1e8837e14a1948f90d65986a7555511b0dd2cb2f479 The OpenSSF Package Analysis project identified 'sagemakertransformers' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

Malicious code in libtpu-nightly (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4710fdb2d58063f6a640883c2617fc154d074a9122c261111dd2e2b10a1e9552 The OpenSSF Package Analysis project identified 'libtpu-nightly' @ 0.1.dev20230207 pypi as malicious. It is considered malicious because: - The...

Malicious code in kangpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11daf46221ff00d16c0c8784b95eba32196bb8f5543e2d3115c2b1826215c612 The OpenSSF Package Analysis project identified 'kangpy' @ 1.0 pypi as malicious. It is considered malicious because: - The package communicates...

Malicious code in yc-as-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9df89f5f0260f38e93635cc5df99e7ea267d4c07f25e1446a49c08fdf21befe7 The OpenSSF Package Analysis project identified 'yc-as-client' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in service-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 851b9d051bac830771e87d8acb0857e1bb20dcf8f3fad2af78ca8785cda4d668 The OpenSSF Package Analysis project identified 'service-etl' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in taxi-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee43ff79927a680e9108ebd7b3f0a932760beedbf583a5681c2732568e362b6f The OpenSSF Package Analysis project identified 'taxi-etl' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in dmp-suite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 519dd07a618b2ba0671d86ef8fa2155f33aeaacdeed9a41d7f2e5257fb737aac The OpenSSF Package Analysis project identified 'dmp-suite' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in example-package-taxi-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc9af8fd35e3ce951b8d314b087c20afbd1ed1eeb3ff9441b0ea5d5ac5576e5a The OpenSSF Package Analysis project identified 'example-package-taxi-etl' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

Malicious code in tucan-x (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 69bdf61be1b4579f5016adcacef468a263b798b77b87d354e90900d4cb4474b8 The OpenSSF Package Analysis project identified 'tucan-x' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

SUSE CVE-2023-30608

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

Malicious code in pyautodllxd (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f459717e35091f9518335b31c67eaf3dd9c6033679b4b24572e7f32c8669c8c9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

SUSE: Security Advisory (SUSE-SU-2023:0724-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

A malicious Python package on the Python Package Index PyPI repository has been found to use Unicode as a trick to evade detection and deploy an info-stealing malware. The package in question, named onyxproxy, was uploaded to PyPI on March 15, 2023, and comes with capabilities to harvest and...

Fedora 37 : mingw-python-OWSLib (2023-8312a80917)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8312a80917 advisory. Update to OWSLib-0.28.1, fixes CVE-2023-27476. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Malicious code in rawrequest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b9c75bf32c6679c49b3a17ee9ce320dfb26411c4fb2a7cf0fa4f06ceea5ae033 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqguiproofad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2038f714e65a7ca4986eb7682c8618bbe9cef3aa2ae698dfb2a8321669c84b29 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpcraftcraftencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d51287043143cc2b77dac9f3dac8fe7c54c6e797cee2425b1a581c4565357235 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...