Malicious code in pyloy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 44deac488d2a8cdb533662db66592095a36ab35a491b4e9415c597cde0d37eab Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in websend (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 34f01e1b145ba4aed5b39af44bab870ab9406bc9e98d8f1f92354901189e7e2e Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in embeds (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46ae6a18503196c40e7fd1759d8a68025e6a980a64821c2a1232b7f76fbc2779 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in larpexodus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5b391a50d47eceb41e0f102a5825b7e68d35a2c950ecc91f32c2b48e890792b9 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in automsg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a96ae8403b713d8dbe1fbb5e8a17e2e06d08740e459e90b03769d5dfc7da33d9 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in cblines (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80531e39cd96b75b32c7549840f7bc6984377765d9f9f663c0b560332b4e1b84 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11654 Malicious code in partpyth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10b94529eaedc3a17c5c94e13a371b59109c0713856e4a5ba371ec57d6717122 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11750 Malicious code in xsilyxd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 acb32201e238cb8cad93c54f19da257035f478ebebf6a5d7709ed787525b08b4 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11673 Malicious code in pykane (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f0e00230ef4f47cbb9d43ffd849aa41f1e4f8b192944f56fdd49e6e24e6dc8d Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pyvantq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6c5b2c1c554a0ffc8e3b4fd9ea4e9abbf3c9773146ceacbf17557b044032dd2 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in xsilyxd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 acb32201e238cb8cad93c54f19da257035f478ebebf6a5d7709ed787525b08b4 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

MAL-2024-11660 Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

PT-2024-40522 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: Exotel affected versions not specified Description: The issue concerns a compromise of the Exotel project on PyPI through a phishing attack, leading to a malicious release that downloads and runs malware during installation. This affects...

Malicious code in utilhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f91f83da1ea0307373682776ad3de3a3fd320d57280f40fa82f47aaf316d3062 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in assulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 86723cbd5b75cbf26ac4ec2f1dc722c282d7f2df07909a7d7a4ee4c07819d3bd In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in flophttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45ad705b0505a09a4123e74a68d03c4a16dd91604a6d9ab323eb0d776320f68a In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

MAL-2024-11532 Malicious code in assulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 86723cbd5b75cbf26ac4ec2f1dc722c282d7f2df07909a7d7a4ee4c07819d3bd In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in asyncmodules (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4089e0f824ae366e1e3e128e2213a6700d6bddea0b9209fd426148a0792edd53 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in assaulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c588101b33f530e5b4d8504f4a9cf1353eec7356231e9f4137ab1a187b780d5 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...