MAL-2025-922 Malicious code in falask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95241c523519ca2e69e19dc499161e38f895f76fb8f76114acf4d583d8288d66 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2025-976 Malicious code in rreqest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 baa2747741fea6c476a38254b1cd32094fd0879e82055ae401b379cb31fa6b7d Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in fflask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 106052056ac243ab1b11c7bbf3a04ff9f1b408cf92616fa635242b4230490d2f Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in fkask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d3bbbce78f8816ead148780776c4371cdd08775ee74639fea33b9598f8bb4b2b Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in reqest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 35a7c05f500ebad2694b0b98105f189762f1892d35081dfd36a47787a2205f59 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in reqiest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae04fab0eca7fc7fee7494d9651df8a18dbe919cd8c0fa56522711b9f845aa25 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2025-973 Malicious code in requeszs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8c95a5f64dd212c781d6b3c45eb03f38bcf5220f688c4d903e9bfca20911b62 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2025-923 Malicious code in fflask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 106052056ac243ab1b11c7bbf3a04ff9f1b408cf92616fa635242b4230490d2f Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in falask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95241c523519ca2e69e19dc499161e38f895f76fb8f76114acf4d583d8288d66 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in rreqest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 baa2747741fea6c476a38254b1cd32094fd0879e82055ae401b379cb31fa6b7d Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in flasl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15f6805748d19912e476158c87c5c50c0f8b50bdfa82d8c6e24d996e7c38880c Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in requeszs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8c95a5f64dd212c781d6b3c45eb03f38bcf5220f688c4d903e9bfca20911b62 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in reqzest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32fb197467e37327d9d2b079a85faa4ffffa0cdc05c9703957a9f36de8f453e6 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2025-965 Malicious code in reqesst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e4a4682ad923d5e0f2e444487e5f42a4bae8d753ecd747f7b652e407f5cc32f Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2025-975 Malicious code in reqzest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32fb197467e37327d9d2b079a85faa4ffffa0cdc05c9703957a9f36de8f453e6 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in filecraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d0eec02526b659b5e856c211e05be1842dc283ed0b7d07dc90574ea5c7dc34a During the installation, the package iterates its files and attempts to import a hidden module - which is embedded as ZIP archive in the image file --- Categor...

MAL-2024-12272 Malicious code in filecraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d0eec02526b659b5e856c211e05be1842dc283ed0b7d07dc90574ea5c7dc34a During the installation, the package iterates its files and attempts to import a hidden module - which is embedded as ZIP archive in the image file --- Categor...

MAL-2024-12282 Malicious code in handyfiles (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 381cd796d4e5fce8fb62c337374b5303e0b2466d67467efc95cbc4d7d8248dd4 During the installation, the package iterates its files and attempts to import a hidden module - which is embedded as ZIP archive in the image file --- Categor...

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python Package Index PyPI repository and came fitted with capabilities to exfiltrate sensitive information from compromised hosts, according to new findings from Fortinet FortiGuard Labs. The packages, named...

Malicious Package

Overview zebo is a malicious package. This package steals information from the victim by logging keystrokes and taking screen captures, which are exfiltrated to a server under the attacker's control. Remediation Avoid using all malicious instances of the zebo package. References - Fortinet Report...