Malicious code in afritonpy (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in afriton (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in afrit-name (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

In yet another software supply chain attack, it has come to light that two versions of a popular Python artificial intelligence AI library named ultralytics were compromised to deliver a cryptocurrency miner. The versions, 8.3.41 and 8.3.42, have since been removed from the Python Package Index...

MAL-2025-2964 Malicious code in flamepro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53c4ea20a42b8ba4c81e1625a540dbe1eff5fde676d280fb1b1a53d04b7ef069 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in dbsxrchpro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7e904380115b3ea3cfb5766a5e527bb71775c65af3706c2d5392ef3e60d17c5 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in flamepro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53c4ea20a42b8ba4c81e1625a540dbe1eff5fde676d280fb1b1a53d04b7ef069 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in graphicsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f85a722af04dc8f110fe530c6c3de3345ac2cf99b4e315d82cbbf0039c54660 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-931 Malicious code in graphicsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f85a722af04dc8f110fe530c6c3de3345ac2cf99b4e315d82cbbf0039c54660 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-2955 Malicious code in dbsxrchpro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7e904380115b3ea3cfb5766a5e527bb71775c65af3706c2d5392ef3e60d17c5 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-936 Malicious code in intgraphx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4fb1e216d0815e75bd49620f6176c757576a58b8e4669df0ff803d7a84aad2ba Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-12308 Malicious code in my-main-manager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac004ff76ebc011d60ae86c56b7f57ddb6ac0d24ff0ddd9ad777319775f79282 While the package appears to be a manager for Windows service, the linked executable is an infostealer with capabilities like cookie stealing ang keylogger. Th...

Malicious code in foop (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8dd063ab676114f4458052dd442285fb78dace9c91fd0b810c5c137cf3a4cb44 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

Malicious code in auth0-open-source-template (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c14dd94f3cdea34f9073f26be0716cfd944e0362396ae1dccab12196021a328c The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

Malicious code in bancor-simulation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e9ecf6b613a42c070932a842fc4ebe81508d28adbb0aecee9aebe4e530acc0a The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

Malicious code in crowdstrike-foundry (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 89a436ce955b3eb01df1e23a27f7b9d0091b3720818f31559038c7af44bca276 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

MAL-2025-901 Malicious code in auth0-open-source-template (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c14dd94f3cdea34f9073f26be0716cfd944e0362396ae1dccab12196021a328c The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

Malicious code in datagov-harvester (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cd1508013c2ef9abe7de7e4eb3bbdc492b545c3344ae4148b4e06165e8313229 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

MAL-2025-927 Malicious code in foop (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8dd063ab676114f4458052dd442285fb78dace9c91fd0b810c5c137cf3a4cb44 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

Malicious code in calccc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 66371c79f4cedb638d8d283883415c46a4bf6be25e3699fe5229bc8cd71a2f0a Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...