Malicious code in sitecard (PyPI)

Source: kam193 49be8995374d0e3d2bcb8f163675221e14bfb6d7d968a6fa5d8165e4f493997d The package provides code to create an SSH session exposed via tunnels. By default, created session is accessible without any auth and reported to a hardcoded location, exposing any user to be accessed by attacker. --...

MAL-2026-18242 Malicious code in sitecard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f44333ae4aa62e60d153dfbdc535cd08f778e917a1052ecaf43722d8a7165d sitecard exposes a workspace directory over SSH via public relays srv.us, upterm, cloudflare/cloudflared, devtunnel, ws-relay as its advertised...

Malicious code in sitecard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f44333ae4aa62e60d153dfbdc535cd08f778e917a1052ecaf43722d8a7165d sitecard exposes a workspace directory over SSH via public relays srv.us, upterm, cloudflare/cloudflared, devtunnel, ws-relay as its advertised...

Malicious Package

Overview sitecard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...