Malicious code in serverkeeper-verifier (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62ec235d314e175928f82504dade8d7f8313bc88707038976e5be6d78709b869 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

Malicious code in acloud-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4900ca27e14ecb6f022a740bd420fa046084355344379dd21a2b59c53d1c95f1 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

MAL-2025-2929 Malicious code in acloud-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4900ca27e14ecb6f022a740bd420fa046084355344379dd21a2b59c53d1c95f1 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

Malicious code in tcloud-python-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 221affa8a84428ae21f288ce299d114742d269e7bbcbf223a0aa666327fae2c4 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...

Malicious code in coingenerator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 78810d9638861bd92d3f96d7e29a552a41eb97b69b8deba84892cc7f458fb8c0 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...

Malicious code in coinanalysis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 786d19aeeea93da949996b447b05122b0750075cb98b943dcb27c0ea622521ea Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...

Malicious code in transaction-analysis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 49ab525dda997f7abc07f4ef30a62443e40a0f01e218b74d6db9b378fe51f2a4 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...

Malicious code in coinanalyze (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7faa2aef0e6f2b325d841b405418465db3f0dd601519861d70df45bb4d7adb5 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...

MAL-2025-3000 Malicious code in solders-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eff6c26674dd4f0408742c46785656c3a5d19ca0a87366a60534d37d5a54e687 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...

Malicious code in singtok (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20dad294eb5c742d0044f1dde01f51646f0b34a86a7cb86c84547981276f46ce Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

MAL-2025-191869 Malicious code in sintok (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7ac54e69b2c1c8f39c9a938ce34d0f0382a0185aa821e4d8e6eaeaac1c456ecb Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

MAL-2025-191868 Malicious code in singtok (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20dad294eb5c742d0044f1dde01f51646f0b34a86a7cb86c84547981276f46ce Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

MAL-2025-3014 Malicious code in w3socket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 729a8001d69369db2b822c1a13ba9363d3dad46299a6ced4e52ab604c3261ec4 web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

Malicious code in web3socket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7dc7eadb2f62e32882fffd4423ba15f5dda9f6f157a2c6eedbb7d040602237ed web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

Malicious code in web3node (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9f226e2391e0717c113d67f398aae7c36705ffbef3310caebd76a1b8b11f0811 web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

MAL-2025-3017 Malicious code in web3socket (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7dc7eadb2f62e32882fffd4423ba15f5dda9f6f157a2c6eedbb7d040602237ed web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...

Malicious code in computestpspeedcomp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32f4586fefb791454cfa5a7bebbdd0372f4660b05989bfcd74a6f5aad48cb565 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in asyncconfigreader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c563ba469b1149ae0a06684eb3db69c618ec0780f66670b8183a874ef78d9c3 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in bprintoor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca03f86b909883f380bfa18a115d0a840f2195938d5b154f62b69e991865a496 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

MAL-2025-2976 Malicious code in moonitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15670804eb18266dd9f95b15af455d0acc3b21b2f769ea608ea86b7265cf4326 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...