Malicious code in rreqest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 baa2747741fea6c476a38254b1cd32094fd0879e82055ae401b379cb31fa6b7d Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

Malicious code in flasl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15f6805748d19912e476158c87c5c50c0f8b50bdfa82d8c6e24d996e7c38880c Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2025-975 Malicious code in reqzest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 32fb197467e37327d9d2b079a85faa4ffffa0cdc05c9703957a9f36de8f453e6 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2025-965 Malicious code in reqesst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e4a4682ad923d5e0f2e444487e5f42a4bae8d753ecd747f7b652e407f5cc32f Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2024-12272 Malicious code in filecraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d0eec02526b659b5e856c211e05be1842dc283ed0b7d07dc90574ea5c7dc34a During the installation, the package iterates its files and attempts to import a hidden module - which is embedded as ZIP archive in the image file --- Categor...

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python Package Index PyPI repository and came fitted with capabilities to exfiltrate sensitive information from compromised hosts, according to new findings from Fortinet FortiGuard Labs. The packages, named...

Malicious code in discordbotstatus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2dbd628d2baf4f55c8f9c9dcd441ae7deeee86379f73dd79beb48e41d4bfbe8f Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...

MAL-2025-920 Malicious code in discordbotstatus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2dbd628d2baf4f55c8f9c9dcd441ae7deeee86379f73dd79beb48e41d4bfbe8f Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...

Malicious code in code-tracker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f9a735fdad092318def6c11516f5922631656bb986f77887fff44aaed26830dd During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in presudo-generate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e390060b9c380a6e7c1743dc35278cbe02801d90678046380344edd73673ca54 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in noway-back (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ddfd888bb0cff1ee81f07dbdfce95081afa43d43a18f8a0417b3724337c2e287 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-910 Malicious code in code-tracker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f9a735fdad092318def6c11516f5922631656bb986f77887fff44aaed26830dd During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in langer-updater (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d2e888da57bf1c53e73ed2092516a44aaf46e4876619d129b7e3e4966dfc71e During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in clean-packager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 262c927312d80c4f09dc74bcc93a7036c67a0e3c831d802ce8cbebc21b37e4b5 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in code-beautifyer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1aa07cb2a8c34d8fc5a6728b0985541456937811451149748ae9acdef4892e7c During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-947 Malicious code in noway-back (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ddfd888bb0cff1ee81f07dbdfce95081afa43d43a18f8a0417b3724337c2e287 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-908 Malicious code in code-beautifyer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1aa07cb2a8c34d8fc5a6728b0985541456937811451149748ae9acdef4892e7c During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-909 Malicious code in code-suggester (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e28ce2ce1f759945a6b42ebe9f6f224869ab1f91b85212853e83a20d43a390bd During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in code-suggester (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e28ce2ce1f759945a6b42ebe9f6f224869ab1f91b85212853e83a20d43a390bd During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in lan-clean (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b77907fa5398dac2959c2fa6cc7ab1c451a318803ca9efb40ea52487080609c3 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...