The vulnerability of the Latex Proof-Reading module in the Python software repository PyPi allows attackers to carry out XSS attacks.

The vulnerability of the Latex Proof-Reading module in the Python software package PyPi is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Malicious code in testveriftest1asdlaaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ff36b3e2ad882727ed964a43d4599f3713d2bada89b6cec169d727127c21c2fa During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in veriftest1asdl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e11e583c94e6aea422cd70561ea53212b4b4a26dd4bcb2e42c4c1ad25066474d During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in veriftest1asdla (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e04795c3a8f7fae13a125bde307aa64db04ae9f4ff76bd1d11fb32b4d3f57a36 During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in veriftest1asdlaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 84fe70a8f5e34c8334d7284bcc9b71826210f029708a53a6ec4b9bb90a33054b During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in veriftest1asdlaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ca63296b7d7f9b656944bcaf65cc918b709a2071d1ea5f16d1a7422a9df931e During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in veriftest1asdlaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 18d30d48c72a61cda2e8b0ecd3a27b958e8964b4c65833cb780186382285101d During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-4250 Malicious code in veriftest1asdl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e11e583c94e6aea422cd70561ea53212b4b4a26dd4bcb2e42c4c1ad25066474d During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in meowsapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f59e6347816a732ab5ddebfd141e113bb5cca799fa8b8466f194dbff1a1e428b Importing the module starts delayed downloading and starting a remote executable identified as BlankGrabber infostealer. --- Category: MALICIOUS - The campaign...

Malicious code in rblxfando (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 79348147677636191e632b65c78ba37a77d2ba57abed5c9b257624b0f14ba1b8 Importing the module starts delayed downloading and starting a remote executable identified as BlankGrabber infostealer. --- Category: MALICIOUS - The campaign...

MAL-2025-4237 Malicious code in rblxfando (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 79348147677636191e632b65c78ba37a77d2ba57abed5c9b257624b0f14ba1b8 Importing the module starts delayed downloading and starting a remote executable identified as BlankGrabber infostealer. --- Category: MALICIOUS - The campaign...

Malicious code in timsingapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1331e7dbd74ec00f13073c6230eee52b13ef3db29c643d09cbf0b81cccf4ad97 Importing the module starts delayed downloading and starting a remote executable identified as BlankGrabber infostealer. --- Category: MALICIOUS - The campaign...

MAL-2025-4242 Malicious code in timsingapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1331e7dbd74ec00f13073c6230eee52b13ef3db29c643d09cbf0b81cccf4ad97 Importing the module starts delayed downloading and starting a remote executable identified as BlankGrabber infostealer. --- Category: MALICIOUS - The campaign...

Malicious code in pydoxing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 52e0861f6664f547a0cc13ab9b6aea123213946a49bbdc341e15be6ff6d53b61 Package contains a known Blank Grabber infostealer that starts on importing the module --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

MAL-2025-4230 Malicious code in pydoxing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 52e0861f6664f547a0cc13ab9b6aea123213946a49bbdc341e15be6ff6d53b61 Package contains a known Blank Grabber infostealer that starts on importing the module --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

Medium: python3.12-pip

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

Medium: python3.12-pip

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

Malicious code in tronapinet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebb37f42f335b4a5f11e5e9bdb43390d3ba72478ee5c0ffa12c39f0e5226dd3b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronapipy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f708be2fc70e3c2c9dc79ee1706944cb73f9604b496c4171a5971f5c6e0091fe Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in trongridlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 810f3d44ffd0654acef07cf5bc57e4c1c8daa207332751a60c14f29f64832560 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...