Malicious code in el1t3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in colorate (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chain-validator (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in octopus32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15fe4c8243ee2e3d9bb59df9134466819fdcb2e151cc4d79568dc4eb2dea9ac9 The obfuscated code downloads and starts a remote executable. The remote file has limited detection in VT, but contains at least code to add Defender exclusion...

MAL-2025-5122 Malicious code in octopus32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15fe4c8243ee2e3d9bb59df9134466819fdcb2e151cc4d79568dc4eb2dea9ac9 The obfuscated code downloads and starts a remote executable. The remote file has limited detection in VT, but contains at least code to add Defender exclusion...

Malicious code in ai-labs-snippets-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d5d4e1e66d1a84969c7af5822efb6e894abc0d263c87f583bf45591d216b85a During the importing, it loads a file pretending to an AI model. This file contains pickle-serialized code that exfiltrates data basic IP/username info, as wel...

QUT-DV25: a Dataset for Dynamic Analysis of Next-Gen Software Supply Chain Attacks

Securing software supply chains is a growing challenge due to the inadequacy of existing datasets in capturing the complexity of next-gen attacks, such as multiphase malware execution, remote access activation, and dynamic payload generation. Existing datasets, which rely on metadata inspection a...

Malicious code in coloramapkgs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c7f00bfa67a0d8743c0d46766e677dce5d28db461505c662fcb8cd9efc4b2417 Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-5126 Malicious code in readmecolorama (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4f74e374afe61cdaa52e0c651ae413abc94b50cd15de263a9d247de21bfc6fa1 Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in coloramashowtemp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 68b62d3c6ab90e6f581e390f03610916462b830f303532bd5528e2d5c37bb46e Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in coloramapkgsdow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c07b8b1a8058a35f094f6baa72e55bca26bfb3b8bbbde78689ddf0373f698cc Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in sol-prices (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d95d5a12e7c7a9753ed8a1612ade65f2e5775940dec3eadaefb47ec670bfc1d Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-trade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e84e568bb86db442dd7d2e19e6fa1805ea10085d9926220d986941d87ca99259 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-live (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 edea0605b97d331d0da7af79c24a8875042687bf06aed9192f7cded40da09012 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-5111 Malicious code in dexscreener-data (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 066a4d507cf7468384b144c7aa850b759abf3d38a02a609b42eed723f149f37a Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-5139 Malicious code in solana-trade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e84e568bb86db442dd7d2e19e6fa1805ea10085d9926220d986941d87ca99259 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in dexscreener-charts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46bedd3ee92a24c08ca1ab124f058e6b240b43c4cc9431ceccc8b2c050437b5e Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in coloraiz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc4606b3e3f05632a889906f4c259e329a08308382fbc27329752eb8ea6a6c3c The package imitates colorama, and places a proxy object over the original colorama module that on every usage executes a remote code. The remote script instal...

MAL-2025-5102 Malicious code in coloraiz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc4606b3e3f05632a889906f4c259e329a08308382fbc27329752eb8ea6a6c3c The package imitates colorama, and places a proxy object over the original colorama module that on every usage executes a remote code. The remote script instal...

Malicious code in rich-figlet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b97458c87c8580a9cb2f2edc0af2ae40a36489dafa860102eee0307256cb416b Malicious clone of pyfiglet. Importing the package starts a series of downloading and executing of obfuscated malicious scripts, partially identified by AVs. -...