Malicious code in py-hydraurlstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 47625e61f184c45d87c486e1758fc80d20257676c08d5b37a3ff8b2adf8e8e98 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tptoolpywgui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13ae482293b38eb9a03870f3e171704aa0f874d8bd2d844f29b891e26bee00f7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqultraultrapong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2c98e404aabd0d77c45913d27a01083d5a5e8d129675ea047245bb4b3f943c47 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

USN-5821-4 python-pip regression

USN-5821-3 fixed a vulnerability in pip. The update introduced a minor regression in Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Sebastian Chnelik discovered that wheel incorrectly handled...

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

A malicious Python package uploaded to the Python Package Index PyPI has been found to contain a fully-featured information stealer and remote access trojan. The package, named colourfool , was identified by Kroll's Cyber Threat Intelligence team, with the company calling the malware Colour-Blind...

CVE-2023-24329

A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity...

Malicious code in py-hackedultratool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 683154729de593cbfc8208d40aa345d873fc343abf863e10d885962f3b13a1e7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfreplacetoolreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afa2837f01d52ea3608d81ca5f739c43e9b4707e5ff3f8219f51d2c27f3dc03 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libguicraftcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 10b1c6c9618ba70f95433b25c4db3ac8a11dbff4b224e16fff486708b654ec6f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfcvedpep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx faffc37b530acdb4e7a54c9082a078755846487d2a529f9e0aeb965b498666ee EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in librandomintelgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9c2b6fb72b006b45cdb0e67dea5bf29e1295782fd52e0cf0aa80313bdb43bf8f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpiposintmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b15e152c7f52a0a11b9047344ce98edb9f7d791675de08cbd77b29e1f06c5e01 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqvisastred (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 38da1704b225a9e7e330990b5c052419bf41e5d10da15b756799e741b912d299 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqtoolvisaram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c96f70a121a08fa5e02be5a893c229900a5baa973a6bf212ca7d42e0e62a8e65 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqosinthackedstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0cafa12b67db2bbad0f0fc52b6bfaade72be8319eee2b794aa10498757d4da37 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpstudystringpep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 33dc8dd08e3b1df3e8048741363dee922fed9a8c6c1028c035a9f914e4e079f6 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppushvmgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96c8cf2f968b45c647c32d2dc65de5b1550ae52555dfadf4c35151afaefc1d5a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfcandyhttpnvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ed97bf014c9d4e0b72e81b21f933a17f02a7af22c3adc125e0eabf5a4bfb2f6d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpullurlcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx edab3edc06b209aa1bbec0f7e1fc7ae8f0a03b9b53bbc5d74f1cbd1aec12bf8c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqnvidiapaypalmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cfc5dfae5c2a0cf884394ec5c67fd0e6974c51bc6a32941045589410690ebbbd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...