Malicious code in setuptolos (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 89f6c10eb8edc13e9f46c33bba334822fbb3693527f3fc89714bd86adc3be1af During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11538 Malicious code in bo3to (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 131072b5bfcd4ce6218aaec66423046b83d0e49904d5992b26192daa201421bd During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in seabonr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 338d487f231b38056400dad7ac2135955e45c2d6c75003e23e3e08df1c69c63c During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11621 Malicious code in kersa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d622fba4f0f9e74871fb87964bdc3818e244e0f9669a814ae71b923ff699e9be During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in torhc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 385cb451ed567a10096fce231790d6a9bce59bb47c8d7bdfff5a8f4aaa0854ed During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in bo3to (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 131072b5bfcd4ce6218aaec66423046b83d0e49904d5992b26192daa201421bd During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in kersa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d622fba4f0f9e74871fb87964bdc3818e244e0f9669a814ae71b923ff699e9be During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in asciidrawing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 633d53a1b6bcde673f71f2788cc6c268f7eef20552eb7a0dc3f533f6a9a7ad12 During installation, a Discord webhook is used to exfiltrate basic data. The package seems to attempt impersonating the "asciidraw" package some files and...

python39-3.9.20-2.1 on GA media (moderate)

python39-3.9.20-2.1 on GA media Announcement ID: openSUSE-SU-2024:14352-1 Rating: moderate Cross-References: CVE-2024-7592 CVSS scores: CVE-2024-7592 SUSE : 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Malicious code in pdf2doc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae55659200290f97e3d07c41d49af574eb14ad3dc5913535e8d100cf2c48dd58 During installation, the code attempts to exfiltrate basic data username, host name and send to the attacker. The package looks to be a clone of an existing on...

python311-3.11.9-7.1 on GA media (moderate)

python311-3.11.9-7.1 on GA media Announcement ID: openSUSE-SU-2024:14346-1 Rating: moderate Cross-References: CVE-2024-4030 CVE-2024-6232 CVE-2024-7592 CVSS scores: CVE-2024-4030 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2024-6232 SUSE : 7.5...

Malicious code in sendtowev (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bee6e22271136b92077edad317e9a1e3eaa120bba73814159142d522cba12ced Package contains CStealer, a known infostealer, starting on importing the module. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2024-11653 Malicious code in package-lib8127 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2e0e446a5a40a8c6a1ea1041fa0fc875ef0dab2a8ad10cc74e459221906e6851 Package contains CStealer, a known infostealer, starting on importing the module. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in package-lib8127 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2e0e446a5a40a8c6a1ea1041fa0fc875ef0dab2a8ad10cc74e459221906e6851 Package contains CStealer, a known infostealer, starting on importing the module. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2024-11704 Malicious code in sendtowev (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bee6e22271136b92077edad317e9a1e3eaa120bba73814159142d522cba12ced Package contains CStealer, a known infostealer, starting on importing the module. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in discself (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 271e2fef9fd10cd1a179df1be1e1f92c837d1ecf3d074451a9b1b6205babe511 Package suggests a code to build bots; however, the code just exfiltrates the token given by the user to the hardcoded Discord webhook. Looking at other activi...

Google Fixes GCP Composer Flaw That Could've Led to Remote Code Execution

A now-patched critical security flaw impacting Google Cloud Platform GCP Composer could have been exploited to achieve remote code execution on cloud servers by means of a supply chain attack technique called dependency confusion. The vulnerability has been codenamed CloudImposer by Tenable...

Mercurial configuration injectable in repo revision when installing via pip

...

Malicious code in request-wizard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ff748393cb55e78c43fea879bbd55034152148246aa8d45359cfa8517845e17c Importing the module starts an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-09-hyperreq...

Malicious code in hyperreq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a4662a05cce5bc61521e977b78c1abdb16ecaed027888309aa86ebf22166222b Importing the module starts an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-09-hyperreq...