Malicious code in backwwi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 23f7db675ae2d9beeb90ac31070aeb2a2ca9902ae348f92b30f828c200cc3441 When importing the module, the obfuscated code downloads and runs a remote executable --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in fabrice (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d1d6b36980b1999e5525b7490b4a430c21cb4f86493a11b76f34ae8c02bfc19c The PyPI package fabrice is a malicious package typosquatting the legitimate package fabric. The package is an info stealer primarily...

openSUSE Security Advisory (SUSE-SU-2024:3964-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-11530 Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years

The malicious Python package "Fabrice" on PyPI mimics the "Fabric" library to steal AWS credentials, affecting thousands. Learn how…...

Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

MAL-2024-11611 Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

RHEL 8 : python39:3.9 (RHSA-2024:8977)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8977 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

CVE-2024-51751 Arbitrary file read with File and UploadButton components in Gradio

Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary file...

Malicious code in giantmidi-piano (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 84fa69b27b20b3760633e27545f0bf5895b02cf0566fb6b75465a581802f4975 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in gym-reschdule-combination (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9d6896ff82aa630b84126788fe76a7c577e11e871c9307f5b56a43ea7166062d A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in monoliht (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b0594d4897f61df4c3fce7993c0b5070f13b76f785a7a964bff40e65b566bfd5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in image-dream (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dc5a040f22951aa7352846d3518445c278d2c8aab44dcdf8435fd063e079957 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in pytorch-lighting (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62c64e574f5ad4d75ebc2c82d4cc48edb6185486f8379bfd2a7bd330ce94f50e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in feature-preserve-portrait-editing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 655ca5fa8c26583d141a0d6f86c0bca2e156cbad062d86ff11ec6827d2ac9cf7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in mnolith (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 207bbf082f73c1f6a049ee32f8cc0c74e31ea20c858caf879db53107132b9c4d A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in midi-melady-extraction (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2ea216ddb559e40724229a4744f930ac8f9189582a30c9151da9036cd1e8c8f4 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11547 Malicious code in byteff (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a56aa5a63bf5b3ed081b62351f3aedb42fd6c2e834ab240922247add79aee664 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in textharmony (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a225b73c6a06e67b7911b74dae2bd28201575919bbcfe2cde0ad1a2a0b57aee6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...