Malicious code in nezur (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b50feb48c96e1118a7a347159715ad52cef02efdc463783eb9edcc5f33b6bbad Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in mumupatcher (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c629884f1972a86de285e5eda36f8ec8358c1b40d22922ad309a11174af5fca4 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11750 Malicious code in xsilyxd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 acb32201e238cb8cad93c54f19da257035f478ebebf6a5d7709ed787525b08b4 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11550 Malicious code in cblines (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80531e39cd96b75b32c7549840f7bc6984377765d9f9f663c0b560332b4e1b84 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-12332 Malicious code in pymatcha (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 779c6dd8d3b44cbb116c534cbd88dd2a73e5ee6f946e7e37c66f7eba13dedefd Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11684 Malicious code in pytkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9a84a25f2ecd00da29cb51692121d6ab49559ebdee41aff7ab463020612c5167 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11567 Malicious code in cryptocalls (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 68c6992c85099024497d762301f8ae5ee3217a04bdcddff3d4f3ecc214bd737a Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11670 Malicious code in pycordapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 577f50cf18141b14ac9a078d8c777f738c62cebdb4ff8b5b00c6fdb38812acdf Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11654 Malicious code in partpyth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10b94529eaedc3a17c5c94e13a371b59109c0713856e4a5ba371ec57d6717122 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11677 Malicious code in pysolara (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 349cad70487c67d06c267c1bf8200b6ffd83ae0d0d1eeb8be9b80bd93b2c154c Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11711 Malicious code in solaraund (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e54b1521b270ef90ecd30f1d3a59dfcf3027ce2a7c1637d45a8ac2a6e82aa929 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11622 Malicious code in larpexodus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5b391a50d47eceb41e0f102a5825b7e68d35a2c950ecc91f32c2b48e890792b9 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11671 Malicious code in pydeobf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 232dd49c6b4b7390c7524bcae8aeee62a5d737258e0cff12a8c7f851a2982ac5 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11660 Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

Malicious code in pojang-resorter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b5f9cd53d855ccc1ebed2b1f9dc610af8ee0978f5fa689cad954b3a56b1a22b Early versions used overriding install command to take screenshots, then it moved to automated installing an infostealer. Later the behaviour was changed and...

PT-2024-40522 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: Exotel affected versions not specified Description: The issue concerns a compromise of the Exotel project on PyPI through a phishing attack, leading to a malicious release that downloads and runs malware during installation. This affects...

Malicious code in flophttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45ad705b0505a09a4123e74a68d03c4a16dd91604a6d9ab323eb0d776320f68a In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

MAL-2024-11532 Malicious code in assulthimars (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 86723cbd5b75cbf26ac4ec2f1dc722c282d7f2df07909a7d7a4ee4c07819d3bd In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in utilhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f91f83da1ea0307373682776ad3de3a3fd320d57280f40fa82f47aaf316d3062 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...

Malicious code in asyncmodules (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4089e0f824ae366e1e3e128e2213a6700d6bddea0b9209fd426148a0792edd53 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...