MAL-2025-191869 Malicious code in sintok (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7ac54e69b2c1c8f39c9a938ce34d0f0382a0185aa821e4d8e6eaeaac1c456ecb Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

MAL-2025-191868 Malicious code in singtok (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20dad294eb5c742d0044f1dde01f51646f0b34a86a7cb86c84547981276f46ce Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

Malicious code in web3socket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7dc7eadb2f62e32882fffd4423ba15f5dda9f6f157a2c6eedbb7d040602237ed web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

Malicious code in web3node (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9f226e2391e0717c113d67f398aae7c36705ffbef3310caebd76a1b8b11f0811 web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

MAL-2025-3017 Malicious code in web3socket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7dc7eadb2f62e32882fffd4423ba15f5dda9f6f157a2c6eedbb7d040602237ed web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

MAL-2025-3014 Malicious code in w3socket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 729a8001d69369db2b822c1a13ba9363d3dad46299a6ced4e52ab604c3261ec4 web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

Malicious code in asyncconfigreader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c563ba469b1149ae0a06684eb3db69c618ec0780f66670b8183a874ef78d9c3 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in bprintoor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca03f86b909883f380bfa18a115d0a840f2195938d5b154f62b69e991865a496 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in speedtestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e6f351fd3b705c5c3ec61271d7b892158082a255cc25065da833f06f336b29f6 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in moonitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15670804eb18266dd9f95b15af455d0acc3b21b2f769ea608ea86b7265cf4326 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in watchitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0b2a1b7442e643963d1f4aa3fe8696741f7ed248d39effb173f8d77e37690066 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in asynctestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd21bb1c5c93539b976f7a2d7083394bebaacea6ca24c52cebf7b292798158a7 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in computestpspeedcomp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32f4586fefb791454cfa5a7bebbdd0372f4660b05989bfcd74a6f5aad48cb565 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

MAL-2025-2939 Malicious code in asynctestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd21bb1c5c93539b976f7a2d7083394bebaacea6ca24c52cebf7b292798158a7 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

MAL-2025-2976 Malicious code in moonitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15670804eb18266dd9f95b15af455d0acc3b21b2f769ea608ea86b7265cf4326 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

MAL-2025-3002 Malicious code in speedtestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e6f351fd3b705c5c3ec61271d7b892158082a255cc25065da833f06f336b29f6 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Protecting Your Software Supply Chain: Assessing the Risks Before Deployment

Imagine you're considering a new car for your family. Before making a purchase, you evaluate its safety ratings, fuel efficiency, and reliability. You might even take it for a test drive to ensure it meets your needs. The same approach should be applied to software and hardware products before...

Malicious code in astrono2mio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in astronomio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 083fa61d5e589b627ba6c1d6db2db22ef6df9cd06e6df5bda08120e2c65bb20d setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in astronomios (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 44bb8480782438fda3365b0ffcc74a04ae68477448d543ae51c1744b0cdb4a77 setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...