Malicious code in pdsuax (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ml-linear-regression-lib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in marshall (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in javier-vidal (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in h99ai (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eth-account-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in crytic-compilers (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in class-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in atomicdecoderss (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in atomicdecoders (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiogt (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-12303 Malicious code in maliciouspackage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d0e8a8d581266436f0546b5039ee82ab734d45f8489e281322dd871124dad9ce Clearly a demo malicious package, attempting to exfiltrate a token from the git config --- Category: PROBABLYPENTEST - Packages looking like typical pentest...

Malicious code in lwplugin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c6d463791b2f4dc4cdb8a0b3961dbb9b956fc3f0e0ad974fc407211ae9d2e3a8 The attached DLL is infected with a very high detection rate --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in luna-paysure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d22eccc425ab8fc5afe244efb33dd6d500ea6bcdf0942a02dedb3daa9f17da51 Importing the module causes exfiltrating of IP and hostname. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

MAL-2024-11698 Malicious code in robloxrequestsss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8fb526f76dced232dadcfbfa9e2ff4e48e14d9d9600f692c08323f7c44922784 During installation, a remote, highly obfuscated script is downloaded and executed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in discordmessager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 119a7015f090394365981291b03c6f5855b4dfd33da674c238c0c4323063a32a During installation, a remote, highly obfuscated script is downloaded and executed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in robloxrequestsss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8fb526f76dced232dadcfbfa9e2ff4e48e14d9d9600f692c08323f7c44922784 During installation, a remote, highly obfuscated script is downloaded and executed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2024-11577 Malicious code in discordmessager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 119a7015f090394365981291b03c6f5855b4dfd33da674c238c0c4323063a32a During installation, a remote, highly obfuscated script is downloaded and executed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in crypto-regex-checker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a849790638e062a67e51026ebcd7d23b06a5cb901a1b74ce74bcf09762511538 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

Malicious code in user-rand-agnt-user (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e5b1f023c010c55afb11b349054c1180303197e0d411176b276d26574d891702 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...