Malicious code in redis-di-processor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6942290379335757f0deff6d17e2490cd1b47f426b3f1fb533766ab804aa6cb The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

Malicious code in anaconda-anon-usage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 681441a370f0819063d937bf24e1c9fdff7fd9dc5201da7e2c577d8a547fff51 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

Malicious code in pyunzip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e671073274c02d02bdf77f71684ba7a0a854a30cdd671ea431ff5b4ea6d54add Packages downloads remote executable. The final behaviour is unknown, but starts with bypassing UAC and other security controls. Some package clones are...

Malicious code in unrartest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 21a41269d4461bf4c85f40299bad3d27a57b45d762da1301cd872bff282c255e Packages downloads remote executable. The final behaviour is unknown, but starts with bypassing UAC and other security controls. Some package clones are...

MAL-2024-12213 Malicious code in bananaholder (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 75eb68c36b36e5abf8c54609a124590a23d388ef04d2825da3bd83f8e90c7f46 A dependency is declared as installable from a webhook service, demonstrating a possibility to inject malicious dependency. --- Category: PROBABLYPENTEST -...

Malicious code in bananaholder (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 75eb68c36b36e5abf8c54609a124590a23d388ef04d2825da3bd83f8e90c7f46 A dependency is declared as installable from a webhook service, demonstrating a possibility to inject malicious dependency. --- Category: PROBABLYPENTEST -...

MAL-2024-12353 Malicious code in subsys-counter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5aa9a3a8888bf731b171ad413a70076df1eff7c362d520f6f3457057aa615f7 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

Malicious code in subsys-counter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5aa9a3a8888bf731b171ad413a70076df1eff7c362d520f6f3457057aa615f7 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

Malicious code in kmvn-ekjvnbwkhjbewv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7bdb5dbe3c34fefec0edf3fec374c428af88d2600073a8db94054e7feb101fa Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

MAL-2024-12210 Malicious code in audit-themis-i18n (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 37f93a88c028e5f97cf3f81fbfea413f78a01ea84f108247d6d5abf926f0dd73 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

MAL-2024-12367 Malicious code in ttat-api-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d20a1138316e89f4d0fa408c74d2aadafbb6d6c62a1bfb5fdececb77409aadd4 Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

openSUSE Security Advisory (SUSE-SU-2024:1864-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:1855-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in thethreadingassistant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 762eff7d2ce4176f6050d35736ba93b5853e8519e760522372aced785a146e59 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

Malicious code in assistant-threader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6dba125172b57e6b24bcd2cc0df076483e1fe36d1969f37e533d611fb6f9d808 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

MAL-2024-12209 Malicious code in assisting-threading (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 33605e5f943eacd5d5ab7a4c37625226e2ef072f2fd3dac068b169d58ba1c2c9 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

MAL-2024-12363 Malicious code in threading-assistant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7b431362a8fc3af245e62278011eb007f0b23eeaa959c3a34bbb959fa549a4c Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

Malicious code in uconst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cc4ce4d1709ad506513007356fd414ca83c1aa848f9134e952c4b760194428c6 Package "uconst" is the package containing malicious code with multiple stage, exfiltrating basic info as well as browser data. It's put into others as...

Malicious code in aiotrans (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3bd64da5911ab6ec28e1bc33993b363b52702ff6bb19a87b98f37267d0784664 Package "uconst" is the package containing malicious code with multiple stage, exfiltrating basic info as well as browser data. It's put into others as...

Malicious code in audio-separator-fork (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c2fdb66a75c58bc11250d088e141d39a4d2bbf8be018db9bb0ca9fd219d7e257 Clones real package and hoddens an obfuscated code trying to run remote scripts as well as establish backdoor through SSH. --- Category: MALICIOUS - The campai...