MAL-2025-2976 Malicious code in moonitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15670804eb18266dd9f95b15af455d0acc3b21b2f769ea608ea86b7265cf4326 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in speedtestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e6f351fd3b705c5c3ec61271d7b892158082a255cc25065da833f06f336b29f6 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in asynctestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd21bb1c5c93539b976f7a2d7083394bebaacea6ca24c52cebf7b292798158a7 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in moonitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15670804eb18266dd9f95b15af455d0acc3b21b2f769ea608ea86b7265cf4326 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Malicious code in watchitoring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0b2a1b7442e643963d1f4aa3fe8696741f7ed248d39effb173f8d77e37690066 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

MAL-2025-2939 Malicious code in asynctestpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd21bb1c5c93539b976f7a2d7083394bebaacea6ca24c52cebf7b292798158a7 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...

Protecting Your Software Supply Chain: Assessing the Risks Before Deployment

Imagine you're considering a new car for your family. Before making a purchase, you evaluate its safety ratings, fuel efficiency, and reliability. You might even take it for a test drive to ensure it meets your needs. The same approach should be applied to software and hardware products before...

Malicious code in astronomio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 083fa61d5e589b627ba6c1d6db2db22ef6df9cd06e6df5bda08120e2c65bb20d setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in astronomios (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 44bb8480782438fda3365b0ffcc74a04ae68477448d543ae51c1744b0cdb4a77 setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-1964 Malicious code in astronomios (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 44bb8480782438fda3365b0ffcc74a04ae68477448d543ae51c1744b0cdb4a77 setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in astrono2mio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-1962 Malicious code in astrono2mio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-1963 Malicious code in astronomio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 083fa61d5e589b627ba6c1d6db2db22ef6df9cd06e6df5bda08120e2c65bb20d setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in nflx-metaflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d317c47382e978342b2098c06b1d0ff46acfefdc5a5ed6ce2b531b1f5b24fe4 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

Malicious code in pxz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2649e06884047fa82f596d9f9b0822080bff93b64a69a9a6090c0640f19ec656 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

MAL-2025-1984 Malicious code in nflx-metaflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d317c47382e978342b2098c06b1d0ff46acfefdc5a5ed6ce2b531b1f5b24fe4 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

MAL-2025-1986 Malicious code in pxz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2649e06884047fa82f596d9f9b0822080bff93b64a69a9a6090c0640f19ec656 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...

Malicious code in hellohackers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63788f1f3223270be7955b619eb09fa7e7f401084e4332ed732d33b522782a37 File contains a metapreter beacon that runs in the setup.py. Analysed version uses a local IP as the target. --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1977 Malicious code in hellohackers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 63788f1f3223270be7955b619eb09fa7e7f401084e4332ed732d33b522782a37 File contains a metapreter beacon that runs in the setup.py. Analysed version uses a local IP as the target. --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1975 Malicious code in farooq4321 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 165ce280a6d073eebbba054677a6c80307c8353b31e41732ba1ffc1f8a020aa4 Code in setup.py attempts to call a webhook, but most importantly to execute a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, li...