MAL-2025-47762 Malicious code in electrum-bch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e4c3bb0f735a352c6f4d18865f3a145912c31f6b9da22c48e731e7fe750b1dd The modification of https://github.com/spesmilo/electrum not clear which version or fork that during usage will exfiltrate files from the current directory,...

Malicious code in nukebount (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08b5c0de8042d5eedece216ff03327fbb71f32994257141f7d47f01aa8aa5491 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47789 Malicious code in nukebount (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08b5c0de8042d5eedece216ff03327fbb71f32994257141f7d47f01aa8aa5491 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in nukeport (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 93c339ed9593cfb15c4c9907ec2e2d10c4e7f7acc0fb1acca50cb81d157b0551 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47791 Malicious code in nukeport (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 93c339ed9593cfb15c4c9907ec2e2d10c4e7f7acc0fb1acca50cb81d157b0551 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in hacktool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae918afa1c3b130c4df2aa0a968a44eee15feebeb1c1df562a56feb37db96423 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47771 Malicious code in hacktool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae918afa1c3b130c4df2aa0a968a44eee15feebeb1c1df562a56feb37db96423 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in vcdiff-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d15d16ed1fc3a2984f207f6b4cf5fbea00fc66ecbf61a57faee650730aaf5c9d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47811 Malicious code in vcdiff-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d15d16ed1fc3a2984f207f6b4cf5fbea00fc66ecbf61a57faee650730aaf5c9d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in lolcrazy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9e3fc2ad284d2b4b286da2fc5762b18aade19bc38871779157c54cdb6ae8b4cd Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47785 Malicious code in lolcrazy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9e3fc2ad284d2b4b286da2fc5762b18aade19bc38871779157c54cdb6ae8b4cd Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in importsetup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 07d601622d7b27ef8baa4ec8ef05e06c283dd18ace0fba3a856f3a5adbdce69e Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in python-ledgercommon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d88522028116659a8646b0f7c4eb4e6218e498b49ebc36927ca0787720d3e1f9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47799 Malicious code in python-ledgercommon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d88522028116659a8646b0f7c4eb4e6218e498b49ebc36927ca0787720d3e1f9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in etherweb3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 500af99cbff4bad856e50637e3046662824ccdde4cbf8f35cfe5d6bb2c880ce8 Malicious clone of a legitimate "web3" package. During importing, a code aiming to exfiltrate private keys is executed --- Category: MALICIOUS - The campaign h...

MAL-2025-47764 Malicious code in etherweb3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 500af99cbff4bad856e50637e3046662824ccdde4cbf8f35cfe5d6bb2c880ce8 Malicious clone of a legitimate "web3" package. During importing, a code aiming to exfiltrate private keys is executed --- Category: MALICIOUS - The campaign h...

Malicious code in django-aerospike-sessions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feba434f8a55ca606e9301308486d6d3d6f518430157438198d692432c18da23 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47758 Malicious code in django-aerospike-sessions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feba434f8a55ca606e9301308486d6d3d6f518430157438198d692432c18da23 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in medoen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0fcf26f9d33d1a5d868d0637274af9fa3be00737221aaef0cbc596e1fc39f9a Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47786 Malicious code in medoen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0fcf26f9d33d1a5d868d0637274af9fa3be00737221aaef0cbc596e1fc39f9a Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...