Malicious code in alrsnlaseast (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in account-eth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1985 Malicious code in novatwo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1af6bb35b7731df522c58205dc15fd6f54a91770353f372a1649e9bb7020dff6 Code hidden in setup.py downloads and executes multi-stage malicious code. Encrypted code from Github downloads a batch script, which then downloads and starts...

Malicious code in novatwo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1af6bb35b7731df522c58205dc15fd6f54a91770353f372a1649e9bb7020dff6 Code hidden in setup.py downloads and executes multi-stage malicious code. Encrypted code from Github downloads a batch script, which then downloads and starts...

Malicious code in web3imports (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 84bb9be7600c163a4a67214f02bb476ce8498551fb0195bbe56161287d86c8cf Importing the module starts through init.py the code that download, extracts and starts a remote executable. This has been identified by any.run as a AsyncRAT...

MAL-2025-1965 Malicious code in asynchelpers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e262ab4b975a2de9c0216656ca3e760d84f3cdacb526340248dd476c31ddeb0d Importing the module starts through init.py the code that download, extracts and starts a remote executable. This has been identified by any.run as a AsyncRAT...

Malicious code in asynchelpers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e262ab4b975a2de9c0216656ca3e760d84f3cdacb526340248dd476c31ddeb0d Importing the module starts through init.py the code that download, extracts and starts a remote executable. This has been identified by any.run as a AsyncRAT...

MAL-2025-2012 Malicious code in web3imports (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 84bb9be7600c163a4a67214f02bb476ce8498551fb0195bbe56161287d86c8cf Importing the module starts through init.py the code that download, extracts and starts a remote executable. This has been identified by any.run as a AsyncRAT...

Malicious code in markitanalysis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0181af7442259bbe6dfbeec39c99bc62b711e38ec00c2ce460dc47162390c591 If installed using source package, the package collects selected environment variables, including GITHUBTOKEN if set, and sends to an external service. The...

MAL-2025-2974 Malicious code in markitanalysis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0181af7442259bbe6dfbeec39c99bc62b711e38ec00c2ce460dc47162390c591 If installed using source package, the package collects selected environment variables, including GITHUBTOKEN if set, and sends to an external service. The...

Malicious code in reques (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f1c117835fcc30eb4ff0ff5c9426d10011537b644ddea270fcdaba17ed7050e Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1995 Malicious code in rqsts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f9b439bd545383aa5d5b1739d488888d95d4db48c34dc5d8c0339d0e95036af5 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

Malicious code in rqsts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f9b439bd545383aa5d5b1739d488888d95d4db48c34dc5d8c0339d0e95036af5 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

Malicious code in requestsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0225bc4f200eb1897522fdfd971233a6c0e06527d802f2574ed4c31e618b1966 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1991 Malicious code in requesra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42ce5266dc952340618c995bfe692bd0f801b7b3d098188739aa66038074122e Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1990 Malicious code in reques (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f1c117835fcc30eb4ff0ff5c9426d10011537b644ddea270fcdaba17ed7050e Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1993 Malicious code in requestsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0225bc4f200eb1897522fdfd971233a6c0e06527d802f2574ed4c31e618b1966 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1996 Malicious code in superline (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 59df95892042deb7d9fd8ce71d1890aeafd0cdab2cb8bbc3948504e74ccae39e Importing the package starts an advanced Infostealer, probably Blank Grabber, exfiltrating browser data, wifi passwords, discord and games tokens, crypto walle...

Malicious code in mlc-llm-nightly-cu123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 99d49619be0a9e2bcedb22bd4ea489b5cb31a56558e763a78fd09a6f948f2d9e Installing the package exfiltrates information about the host, including environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in mlc-ai-nightly-cu123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9c2954c829994eac2d7a1843849faec71a96ff47fdd4d6ac9453b654df2aedbf Installing the package exfiltrates information about the host, including environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious...