Malicious Package

Overview youreallydontwantthispackage2131 is a malicious package. This library contains malicious code and was removed from the package manager PyPi Remediation Avoid using all malicious instances of the youreallydontwantthispackage2131 package...

SUSE SLES15 Security Update : uwsgi (SUSE-SU-2024:3853-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3853-1 advisory. - CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules bsc1222332 Tenable has extracted the preceding description block directly from the...

USN-7084-2: pip vulnerability

USN-7084-1 fixed vulnerability in urllib3. This update provides the corresponding update for the urllib3 module bundled into pip. Original advisory details: It was discovered that urllib3 didn't strip HTTP Proxy-Authorization header on cross-origin redirects. A remote attacker could possibly use...

Malicious code in kekiktaban (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80c5f1e8e195c782d87e63c2bfc7eac3febe17836c3d502594ea10524f97464e Obfuscated package containing multiple techniques detecting sandboxing and exfiltrating basic data to a telegram webhook, with a little other functionality ---...

MAL-2024-11620 Malicious code in kekiktaban (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80c5f1e8e195c782d87e63c2bfc7eac3febe17836c3d502594ea10524f97464e Obfuscated package containing multiple techniques detecting sandboxing and exfiltrating basic data to a telegram webhook, with a little other functionality ---...

Malicious code in pplgdfhuighsdfyisfgfd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1b4e49a8011af86af7ac1b8cf4760295ddcf33d4b354139db3d92192e813dcc9 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in pplgdfhuighsdfyisfdty (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6da12f1a169dc997d18e49311bb47be99e753dca10106e2bde591c0618268d1 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in pplgdfhuighsdfyisfdty2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b38f6d0da39d944ddde3bda8742a42099398148ad778fb06fe57e6a3274ea2e8 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in gal32fjdsbf89hnd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 289d4debca52d2f6a1dd07428abe588fa5857d09a6726740ba061b260d24de8b Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in fidnffvvbfhghghhhh (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53e1b3f1fc19bbc10acfd813b8839f3831cc7624906c54a8ea4ca6a2d2706877 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

MAL-2024-11661 Malicious code in pplgdfhuighsdfyisfdty (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6da12f1a169dc997d18e49311bb47be99e753dca10106e2bde591c0618268d1 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

MAL-2024-11596 Malicious code in fidnffvvbfhghghhhh (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53e1b3f1fc19bbc10acfd813b8839f3831cc7624906c54a8ea4ca6a2d2706877 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

MAL-2024-11598 Malicious code in gal32fjdsbf89hnd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 289d4debca52d2f6a1dd07428abe588fa5857d09a6726740ba061b260d24de8b Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in huangpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a914c7e2cc097ba21e12b61f176cefd1971bb2a38f3b5fe2e81038e143f27da9 Importing the module starts an infostealer attempting to exfiltrate webbrowsers' data to a Telegram webhook. --- Category: MALICIOUS - The campaign has clearly...

MAL-2024-11610 Malicious code in huangpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a914c7e2cc097ba21e12b61f176cefd1971bb2a38f3b5fe2e81038e143f27da9 Importing the module starts an infostealer attempting to exfiltrate webbrowsers' data to a Telegram webhook. --- Category: MALICIOUS - The campaign has clearly...

openSUSE Security Advisory (SUSE-SU-2024:3719-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b948e846f1817c6c72336ef38aac1149d25e0e40dc903eef60f7af4f3625e1f According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwbdfsfef (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d91b80430038c8f338d63c0fdb59ffe1bf16f35b1885fcf8c197b70078f980bb According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Malicious code in j5gnpuiwerbngpiutbgn0iutb0p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0e410a6e975b8a7d6930f2fbde2be25a08fd2bc8995fc57d1794fc12eaf1e019 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwfef (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 41b992b1717ae4c37710bfcb4b86d013ca8f3eb95dc9e06f47bdd813010db976 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...