MAL-2023-4255 Malicious code in libnvidiamcad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b4730929f98505ebe4b13b4f398c94da4ba3273dbadbb3d2c80b0e2e23c50f0b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqedstudynvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c65e9fbca2a985a9d02820bd6f6ebec1783bc6617f610cc8d21565be80cd9a89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2849 Malicious code in esqedstudynvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c65e9fbca2a985a9d02820bd6f6ebec1783bc6617f610cc8d21565be80cd9a89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Security Bulletin: Certifi package as used by IBM QRadar User Behavior Analytics is vulnerable to improper certificate validation (CVE-2022-23491)

Summary The Certifi package as used by IBM QRadar User Behavior Analytics is vulnerable to improper certificate validation. This package has been updated in the latest release and the vulnerability has been addressed. Please follow the instructions in the Remediation/Fixes section below to update...

Malicious code in selfsupertoolcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5ec02850699fb1a8aa2680708cf7bea981ec6410945b146e99cf10080357d20b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6682 Malicious code in selfsupertoolcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5ec02850699fb1a8aa2680708cf7bea981ec6410945b146e99cf10080357d20b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppyencodepull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b00d54d55ac515db630e72e6e0c819437b4e0290d7810c9ab73e7eee5ed778b1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpaypalhackedlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 09fe30dc7f1ee122013b8b189af5d2189f0b106b9b876a5fa48819228134d23f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqgrandhttpreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 42a610a43aa7326b0be22ead65b1a49dce7978f2bd5536242be9583aa5bc69bb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2911 Malicious code in esqgrandhttpreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 42a610a43aa7326b0be22ead65b1a49dce7978f2bd5536242be9583aa5bc69bb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7161 Malicious code in tpintelpepcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc19ba240ff76fc7e4fc4d165e353608668ebdb3fbdb9d0a836c177d177ad0fa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-randomlibpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6441c54349a2f4bbccdd27f7976307d695623e09d1ab86c624122810901fe6ad EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7456 Malicious code in tppyencodepull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b00d54d55ac515db630e72e6e0c819437b4e0290d7810c9ab73e7eee5ed778b1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4282 Malicious code in libpaypalhackedlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 09fe30dc7f1ee122013b8b189af5d2189f0b106b9b876a5fa48819228134d23f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5573 Malicious code in py-randomlibpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6441c54349a2f4bbccdd27f7976307d695623e09d1ab86c624122810901fe6ad EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpintelpepcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc19ba240ff76fc7e4fc4d165e353608668ebdb3fbdb9d0a836c177d177ad0fa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqinfocctool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b2fb5ec982d8497683b4784537d500c740679efad82005681a4e41ebef4a9e09 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7744 Malicious code in tpvmstringgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7c73f0ff0bc2bbc5dcdb785003fa7257916158ceead89abaf68df9948e480d16 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5325 Malicious code in py-maskprooftool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4f16bb79cd82a99a4c9ae8ed8a5082fd96302d850b2b766f6fddc3be78f15a38 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3446 Malicious code in esqstrvirtualget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6bba06d9e90542c443c26b136a6d85102d2d340cbe602fe93dc2041fa1067228 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...