MAL-2025-48908 Malicious code in tronlastpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45dfbc47ce737fe6b6913f21effbdaebc4a156b837c598449f0f96a6b15754a3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlastpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45dfbc47ce737fe6b6913f21effbdaebc4a156b837c598449f0f96a6b15754a3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlast (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8b8fb3ac2b3c204497c05a7ac21606b47fea8209c79762e816f4016602aafe8b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-48907 Malicious code in tronlast (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8b8fb3ac2b3c204497c05a7ac21606b47fea8209c79762e816f4016602aafe8b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-48895 Malicious code in netkit-lite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b4f77a4b324adb21fdeb5020c213d4ad7d72eefe9f26ee0c134a1cc8544255e9 Project is intended only for presenting dependency confusion and exfiltrates basic data --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

MAL-2025-47813 Malicious code in worldnex (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47775 Malicious code in ipfind-microtip (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ipfind-microtip (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eenomenallib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47761 Malicious code in eenomenallib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47757 Malicious code in discordext (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in discordext (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in btcli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: python-pip-24.2-3.fc41

pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

Malicious code in tronhexpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 87c2e19fbf3db867f8f5e0103196bcfa8e7b76e1b48431ade425fceaa6f7d86f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

PSF Warns of Fake PyPI Login Site Stealing User Credentials

The Python Software Foundation PSF warns developers of phishing emails leading to a fake PyPI login site designed to steal account credentials...

MAL-2025-48891 Malicious code in final-osint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4fd0b958714b427b2b2c39e7afd8134f71fae10467ce32d52cffeb74ec716c2 Importing the module starts an infostealer exfiltrating e.g. browser data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealer...

Malicious code in final-osint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4fd0b958714b427b2b2c39e7afd8134f71fae10467ce32d52cffeb74ec716c2 Importing the module starts an infostealer exfiltrating e.g. browser data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealer...

MAL-2025-47510 Malicious code in vielcord (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4663c6d9af6fa1feac7fd1719e4ff1a729bc8297eec7ce927a13804d475d2c8b During the execution, the package silently download and runs a JAR not related to the package job. At the time of analysis, the content was corrupted ---...

MAL-2025-48889 Malicious code in cugraph-service-server (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82f912f9abcdf4498f41f9d9a0b1667f0a81b7fdb1a7f4f850923223474647e6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...