MAL-2025-191732 Malicious code in flask-tdg-cyberx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...

Malicious code in pytensorlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 188201cba6b48f33920bc11fd719f4dcc6a78b6ca0e1c038f6a950027522cbe2 Importing the module downloads and starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-47795 Malicious code in pytensorlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 188201cba6b48f33920bc11fd719f4dcc6a78b6ca0e1c038f6a950027522cbe2 Importing the module downloads and starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in titifel-pyip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db04496b1d3e7bb6d0e4f13530466504551bf243744fb5f0748195d38a11b0f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47803 Malicious code in titifel-pyip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db04496b1d3e7bb6d0e4f13530466504551bf243744fb5f0748195d38a11b0f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in libgomp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d390b58898a977fec39e6d1fe725cf5c2bcb09b2ecf4c2294a23d75a56dd71a6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47783 Malicious code in libgomp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d390b58898a977fec39e6d1fe725cf5c2bcb09b2ecf4c2294a23d75a56dd71a6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in iamenumerate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554 This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed no other changes. It is anyway...

MAL-2025-41688 Malicious code in iamenumerate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554 This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed no other changes. It is anyway...

MAL-2025-191767 Malicious code in jsonist (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4c74a199a696dbc18994242bc3c29e9a018ddda51fa2bbe224620d9ded6f1818 Calling a method starts downloading and starting an infostealer script --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in python-shuju-keshihua-xuexi-shouce (npm)

The package python-shuju-keshihua-xuexi-shouce was found to contain malicious code...

MAL-2025-30963 Malicious code in python-shuju-keshihua-xuexi-shouce (npm)

The package python-shuju-keshihua-xuexi-shouce was found to contain malicious code...

Malicious code in titifel-pypi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 246211906386c6795c3728d15bf42f5b9083257d1964d8dc21bcda833dd6363c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47804 Malicious code in titifel-pypi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 246211906386c6795c3728d15bf42f5b9083257d1964d8dc21bcda833dd6363c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in browser-run (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b45aebce3647704ac54d30a38e86493e0246f9ea44131394f84628656ef00ed Package uses the name as popular NPM package https://www.npmjs.com/package/browser-run, but the only thing it does is adding a hardcoded public SSH key and the...

MAL-2025-191696 Malicious code in browser-run (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b45aebce3647704ac54d30a38e86493e0246f9ea44131394f84628656ef00ed Package uses the name as popular NPM package https://www.npmjs.com/package/browser-run, but the only thing it does is adding a hardcoded public SSH key and the...

Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41768 Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

GHSA-V594-44HM-2J7P vulnerabilities

Vulnerabilities for packages: python...

GHSA-V594-44HM-2J7P vulnerabilities

Vulnerabilities for packages: python...