Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

A malicious Python package on the Python Package Index PyPI repository has been found to use Unicode as a trick to evade detection and deploy an info-stealing malware. The package in question, named onyxproxy, was uploaded to PyPI on March 15, 2023, and comes with capabilities to harvest and...

Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware

The NuGet repository is the target of a new "sophisticated and highly-malicious attack" aiming to infect .NET developer systems with cryptocurrency stealer malware. The 13 rogue packages, which were downloaded more than 160,000 times over the past month, have since been taken down. "The packages...

Lookalike Telegram and WhatsApp Websites Distributing Cryptocurrency Stealing Malware

Copycat websites for instant messaging apps like Telegram and WhatApp are being used to distribute trojanized versions and infect Android and Windows users with cryptocurrency clipper malware. "All of them are after victims' cryptocurrency funds, with several targeting cryptocurrency wallets," ES...

MAL-2023-6974 Malicious code in tpcraftcraftencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d51287043143cc2b77dac9f3dac8fe7c54c6e797cee2425b1a581c4565357235 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6777 Malicious code in selfvisapaypalmine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3a524c8256175ba1602631d62ca2c164baceef5887f1703949ab0176bb3b458d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2934 Malicious code in esqguiproofad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2038f714e65a7ca4986eb7682c8618bbe9cef3aa2ae698dfb2a8321669c84b29 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6320 Malicious code in selfmccontrolstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d03dd732353d8a4b704ceabee4dac2c38a0adcb3b1f0dd06041b97a2199dd0fe EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2760 Malicious code in esqccpongcpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c15d17f192fef96f3398bc91fe19bdcbcca1aa284532b9c0db068eefc1160732 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2770 Malicious code in esqccstringmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ad3667ef6b7620604468e627b774f2339b75086dc8eb705cbaaa95acd784e178 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpcvadlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d758227301a575ffb8843cdccd4734a806e1bfdee3cc21fbe9e54839748acdbc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4035 Malicious code in libguigrandmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6aecdbe6b089ffe59ba97add73503b78ab4c6dc432a5b733ed03687c146effbf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4315 Malicious code in libpingreintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 905aa24883834e7a2283436c5d1bfa4a55a49714f4912738ee4c1e38ec413eed EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3251 Malicious code in esqproofpostvisa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4f7f8a15aa43961603fb970769bb15b81c183b16ddeac174aba7543a71e826a4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2895 Malicious code in esqgetlibpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 67186a3694ab2d755a3b406239cd713d96ade3d92d6d45ec1e9d41506af1f3bf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5702 Malicious code in py-toolvmintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2ccac77210f7a5f6eb7a2b5cde9438746cb1cb075e08e331a9fd47811447ce0c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4427 Malicious code in libpywvisavirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 540ea90e3d87a637e7a3ec6f877f08c2472ca40792a0205b75ebfebb605168ea EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libosintliblgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6190ac1bf931e799a1ad07e94c4f41da0a77a0b541c92aa259a5cd7b82b0a6b0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4270 Malicious code in libosintliblgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6190ac1bf931e799a1ad07e94c4f41da0a77a0b541c92aa259a5cd7b82b0a6b0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3478 Malicious code in esqtoolinfoultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0b8b6487fc957c84302c55c746ea6ba8fc405cbb64a6a20e5e6dab52614b3f2b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3136 Malicious code in esqnvidiamaskvirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f0028f8281cde48c2f976c5c48b5820bc8c64e5da89269641ce288bfad868d5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...