Malicious code in wallet-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c83a3acdf0b02acc2a9af7cf885f2f744a154847edc66e1264ee1c38d8d7b984 Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in utilswallet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 587ebf505d5385c1a6f9034ff8ede5f52b9f7f31ad154261c0f5a289af62a33d Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-6613 Malicious code in utilswallet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 587ebf505d5385c1a6f9034ff8ede5f52b9f7f31ad154261c0f5a289af62a33d Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in walletutility (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b2977792a67d074770c5080ac055addab8c5bf6b77bf203132fb2c67f32091a6 Package silently exfiltrates the provided mnemonic --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in cpan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e70433969aea3c8283f99098b25b8a598f427b5fd451e9bfd5bc46098704bfb2 Installing the package starts a revshell and download and starts a remote script depending on version, different malicious functionality. The name seems to...

Malicious code in managment (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 754c9b609bb8dafc0fd21d141cd216744d9f2aa1f23898990c52e872fdc23e1a Installing the package starts a revshell and download and starts a remote script depending on version, different malicious functionality. The name seems to...

Malicious code in sqiul83 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67d309c2d4c740426c07cc17768f6313eebd765242e7e4a63aa04213d21358ea During installation of the source package, it attempts to silently download and start a remote executable. At the time of analysis, the downloading link did no...

MAL-2025-6540 Malicious code in mainx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a77aad2f42165ec9582f04fffab948f6a1125564e34f4d09c8d089b2708d8d2 While described as educational package to simulate post-exploitation environment, the malware is active and once started, automatically attempts to exfiltrate...

Malicious code in mainx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a77aad2f42165ec9582f04fffab948f6a1125564e34f4d09c8d089b2708d8d2 While described as educational package to simulate post-exploitation environment, the malware is active and once started, automatically attempts to exfiltrate...

MAL-2025-6477 Malicious code in chatgpt4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a2f99d20569358bdeab51db7e4f6ea0348c87bbf832a7bc244581a472a05072 Importing the module starts shell code execution --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in chatgpt4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a2f99d20569358bdeab51db7e4f6ea0348c87bbf832a7bc244581a472a05072 Importing the module starts shell code execution --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-6520 Malicious code in hashidf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 126b111d14601f2ff653938378c5e6d0f534439f0eac8db7984dfe7aa0f20b52 If ran as a module, the package silently starts a binary hidden in a txt file in the background. At the moment, it appears to be PuTTy, and without additional...

MAL-2025-6594 Malicious code in spokeo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 77e85dedb987a603a027306a57e7b988de52be0c9f12fc2a04dfacf5e3adcd19 Installing source package or importing the module starts downloading and running an external executable, which is widely recognized as malware --- Category:...

Malicious code in spokeo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 77e85dedb987a603a027306a57e7b988de52be0c9f12fc2a04dfacf5e3adcd19 Installing source package or importing the module starts downloading and running an external executable, which is widely recognized as malware --- Category:...

Malicious code in solana-charts (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-chart (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5129 Malicious code in requestsdev (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in requestsdev (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in requestpacket (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5109 Malicious code in dbgpkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...