9238 matches found
MAL-2025-907 Malicious code in clean-packager (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 262c927312d80c4f09dc74bcc93a7036c67a0e3c831d802ce8cbebc21b37e4b5 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...
MAL-2025-951 Malicious code in presudo-generate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e390060b9c380a6e7c1743dc35278cbe02801d90678046380344edd73673ca54 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...
Malicious code in httpfluent (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ad45caa6ad5e9c6f356193dc378e801a9fd3846f04443ad9d6c841b0b2e80c62 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
Malicious code in websynapse (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7323a05444284204de7701ff8b7a738bc155cb22356cf93fc1399dedad5afa46 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
MAL-2025-1007 Malicious code in websynapse (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7323a05444284204de7701ff8b7a738bc155cb22356cf93fc1399dedad5afa46 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
MAL-2025-994 Malicious code in threadfluent (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2a72da681aea57683d0d6b134f0263f126dfe205810fdcfa970c9920058fcf15 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
MAL-2025-933 Malicious code in httpfluent (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ad45caa6ad5e9c6f356193dc378e801a9fd3846f04443ad9d6c841b0b2e80c62 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
Ultralytics Supply-Chain Attack
Last week, we saw a supply-chain attack against the Ultralytics AI library on GitHub. A quick summary: On December 4, a malicious version 8.3.41 of the popular AI library ultralytics --which has almost 60 million downloads--was published to the Python Package Index PyPI package repository. The...
A number of releases of ultralytics contained malicious crypto miner software.
Ultralytics has identified a supply chain attackaffecting affecting multiple versions of the ultralytics package.The compromised versions contained unauthorized code thatdownloaded and executed cryptocurrency mining softwarewhen instantiating YOLO models.This code was injected into the PyPI relea...
Malicious code in urlcon (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11737 Malicious code in urlcon (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in unzipxz (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in test128123612 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11723 Malicious code in test128123612 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11724 Malicious code in testerpackage123 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in testerpackage123 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11721 Malicious code in test-hwp-uwpp (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in test-hwp-uwpp (PyPI)
--- -= Per source details. Do not edit below this line.=-...