Malicious code in reverse434343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9107d563a329f12fdff39bb22f6d6593f6d005d38f9738c2d3a78c94ee368262 The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in reverse4343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a90c21a3dc6b4091f1ccd6f17c99b1ec955954d2b78e93029e63c33f12ed3c7d The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11694 Malicious code in reverse434343 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9107d563a329f12fdff39bb22f6d6593f6d005d38f9738c2d3a78c94ee368262 The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-11582 Malicious code in eosio-signer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 647b75de784ff7b23edb8a5b76d1a017b02d1fd719c6a5a92587fa8d89c25abf Installing the package exfiltrates basic data about the system --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anythin...

Malicious code in tingetone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 014c881ede6ff27565f1de4842b4f7c10162a2daa47c98a4470188571a60639f Importing the module starts the banner function, which downloads and runs an obfuscated remote script. The package seems to be a clone a one of existing simila...

MAL-2024-11727 Malicious code in tingetone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 014c881ede6ff27565f1de4842b4f7c10162a2daa47c98a4470188571a60639f Importing the module starts the banner function, which downloads and runs an obfuscated remote script. The package seems to be a clone a one of existing simila...

MAL-2024-11530 Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Malicious code in asn1tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2f9270a5372d17332c32e8824c44dab167a1f2a78ebc5a204e090ac4487a0f31 Package clones a legitimate package. In the call to check the current version, the obfuscated remote code is downloaded and executed. It appears to be an...

Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

MAL-2024-11611 Malicious code in huggingleg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15016c2674d699af66ab871a07440b7fbd48d3ee267381ff8eb36ef1436df2c0 Package use a name similar to a known service and automatically attempt do download and run a remote executable. --- Category: MALICIOUS - The campaign has...

Malicious code in mnolith (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 207bbf082f73c1f6a049ee32f8cc0c74e31ea20c858caf879db53107132b9c4d A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in giantmidi-piano (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 84fa69b27b20b3760633e27545f0bf5895b02cf0566fb6b75465a581802f4975 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in aslmutetion (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c052a3699080e1fef9f2799c9b4bd850eedd75f5fca1a3ea0dce97607fce9e49 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in type-extension (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d68be7ebeb4e06c6e29be15274785ff085ea469d680f831c9d40a4dc3b54e8c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in gym-reschdule-combination (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9d6896ff82aa630b84126788fe76a7c577e11e871c9307f5b56a43ea7166062d A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in image-dream (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dc5a040f22951aa7352846d3518445c278d2c8aab44dcdf8435fd063e079957 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in raylink (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0613226708c4c024ae1a37260c710abacbdc1b58cf53952873e39d134bb4c3a7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in pyyal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 85587f160dc4e7bcc19305fd294a77bf8256a3efb5e70b8ec84c94994edfb2a5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in netobs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 14480b5317baa8a903d35907265eac5d1e36af264c893920ac52fff04a106359 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in deepsolid (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bd495f31431e621d5ce9440e408d5b86e69cf6545ab1cff1eff26ff87b0a4d08 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...