MAL-2025-4242 Malicious code in timsingapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1331e7dbd74ec00f13073c6230eee52b13ef3db29c643d09cbf0b81cccf4ad97 Importing the module starts delayed downloading and starting a remote executable identified as BlankGrabber infostealer. --- Category: MALICIOUS - The campaign...

MAL-2025-4230 Malicious code in pydoxing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 52e0861f6664f547a0cc13ab9b6aea123213946a49bbdc341e15be6ff6d53b61 Package contains a known Blank Grabber infostealer that starts on importing the module --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

Malicious code in pydoxing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 52e0861f6664f547a0cc13ab9b6aea123213946a49bbdc341e15be6ff6d53b61 Package contains a known Blank Grabber infostealer that starts on importing the module --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

Medium: python3.12-pip

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

Medium: python3.12-pip

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

Malicious code in tronjoi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 342de1bcc165de314cdb7ae0e0c63021edebd55ed3601024f66a3ffeb9ab807b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronapinet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebb37f42f335b4a5f11e5e9bdb43390d3ba72478ee5c0ffa12c39f0e5226dd3b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronapipy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f708be2fc70e3c2c9dc79ee1706944cb73f9604b496c4171a5971f5c6e0091fe Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b299597be11bab32fd63419a38161e9f3d21a6ab3ee73d1f8cb6b00e397625f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in trxone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8d51e889f28c3581e172022d2ef02199c6eb1ed510b6f339e032278e0f163410 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in wallettron (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 daa2901c8248d9a4e63be69c1595134618d563065c67a466b006d53bd92d5ce5 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronix (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 439d817a91f26be5494fd1a2621e8dfb3d178167c802bb0ad7bfcf0fa6b9a0d3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in wallettronpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6232d6f8e03368abc5a38f906502206757571193ce7daf078c26f2e0cd159882 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlix (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 007bba18e8334f8678c8256d3d77e35146758c5b14ae9861c883b6ef7fbee6ff Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-4248 Malicious code in trxone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8d51e889f28c3581e172022d2ef02199c6eb1ed510b6f339e032278e0f163410 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlid (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 387ea56c726485890b55cce5a96c6381e248be3c8eba22c22ead08e4b30db3b1 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlibapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9691194771bc292f5583fcde670bceb7173ec8ec2e1f4a16f1af1322fce21a80 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-6607 Malicious code in tronjoi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 342de1bcc165de314cdb7ae0e0c63021edebd55ed3601024f66a3ffeb9ab807b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in trxtwo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09ce47da0f3bcc2487cbee6b36384d2712ca257abba3155fcd0f13d9f7acd581 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlibpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3830f2a3daeaf5ef1da928f6700860805f4fb3b0f955ab814f4742b334ca7868 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...