Malicious code in awsgluedq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 da16cd67a3672f17d5cce10c5626cf682be33e63db5ca04db645b975afc9bea1 This is a couple of packages with names appearing to be a library for an AWS or other service. Their only behaviour is to call home on installation or import -...

Malicious code in amzn-awsglue (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d53712580b3109807a0911c66dab7e45fa9f2968c76e2f31b5f0a23d23b03373 This is a couple of packages with names appearing to be a library for an AWS or other service. Their only behaviour is to call home on installation or import -...

Malicious code in awsglueml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a7eb55169fa28d500f750382641170b6a921f1ebca4e715a10d33b05ff78f8b This is a couple of packages with names appearing to be a library for an AWS or other service. Their only behaviour is to call home on installation or import -...

MAL-2025-2935 Malicious code in amzn-aws-glue-ml-libs-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e5986d73558862130dbb1317c6a92532786ec34f23d4d88c8fd6273198c5ce45 This is a couple of packages with names appearing to be a library for an AWS or other service. Their only behaviour is to call home on installation or import -...

Malicious code in aws-glue (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96424ced6ac0c4b9f671c5f7f03b4b99f7354e1eb2c48aba76f405f078a62ec6 This is a couple of packages with names appearing to be a library for an AWS or other service. Their only behaviour is to call home on installation or import -...

OPENSUSE-SU-2025:14645-1 python311-Pillow-11.1.0-1.1 on GA media

These are all security issues fixed in the python311-Pillow-11.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

python311-mistune-3.1.0-1.1 on GA media (moderate)

python311-mistune-3.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14637-1 Rating: moderate Cross-References: CVE-2022-34749 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2025:14637-1 python311-mistune-3.1.0-1.1 on GA media

These are all security issues fixed in the python311-mistune-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in utf-cleaner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b9e5c5deafbf756df5201976fdbdc3c61c10e815234df9aeb32764a3cd9652 During import, the package silently downloads and executes remote code. This code starts a web server in the separate process and listens for commands to execu...

Malicious code in javascan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b87a6ab9caea125ba4a71189d6a1740668e44d637f7e7c2d4f85daaf4f54ed0 During installation, a code is downloaded and executed. This remote script then attempts to exfiltrate environmental variables, SSH keys, Slack secrets etc. --...

MAL-2025-1978 Malicious code in javascan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b87a6ab9caea125ba4a71189d6a1740668e44d637f7e7c2d4f85daaf4f54ed0 During installation, a code is downloaded and executed. This remote script then attempts to exfiltrate environmental variables, SSH keys, Slack secrets etc. --...

Malicious code in just-test-framework (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ab2d45d38003a542b3db3afaf891f8269c46e7ac1c342c06148f8859a03bc00e Importing the module exfiltrates basic information using DNS queries. There is no other purpose of the package. --- Category: PROBABLYPENTEST - Packages lookin...

openSUSE Security Advisory (SUSE-SU-2025:0047-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14628-1 python311-slixmpp-1.8.6-1.1 on GA media

These are all security issues fixed in the python311-slixmpp-1.8.6-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE Security Advisory (SUSE-SU-2025:0029-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2025:0008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in wdwq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aefeaeba3d2b87141b1e79dbe4e4294e949aaaf9c07f87182bd20234d611bc66 Starting the module starts a Telegram bot client capable of exfiltrating files when requested --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-1005 Malicious code in wdwq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aefeaeba3d2b87141b1e79dbe4e4294e949aaaf9c07f87182bd20234d611bc66 Starting the module starts a Telegram bot client capable of exfiltrating files when requested --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-974 Malicious code in requetses (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d43e83ac1c0257aa1168edf9c20430524b46520f60a5f5a0c0e1c2040afa0c87 Under a typosquatting name there is a package prepared to exfiltrate photos from a phone, although it requires external trigger. --- Category: MALICIOUS - The...

Malicious code in requetses (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d43e83ac1c0257aa1168edf9c20430524b46520f60a5f5a0c0e1c2040afa0c87 Under a typosquatting name there is a package prepared to exfiltrate photos from a phone, although it requires external trigger. --- Category: MALICIOUS - The...