Malicious code in giptython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e4f24f0e607f40d62174910c08aebbf2b13c2c3d4c095e0704bbaa819ce37082 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toollkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cd4ed78a11c95724967c6161e24facba220d07404deff69a75ce6a5ce9e93015 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progressba2r (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57ad7eeb7e8290f07b52a1170c9522d6542094ec49d0bedcbff805b83804cdde Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in equests-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 28cdcdae3c9144396d5b7f6c9f741bffb25c111e95c270c9d719155b7ce0c581 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-toolblt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3ada42ede532621e26d32b1d7c1554f5b33337b73090a7aa0b051f69626cf5da Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in siplejson (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 510010840970c21e64aa4803dced7f75832e88d73a8b54ea11e9d12882fbb254 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websoket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 927f32cb8d7dce3b04539d688c8c5d5917fcfad305a321a7deade069388b410d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in python-binacne (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 242390e4eac66fd15d4807033c99de1645afecae38d3d5c44e051d43c6d41454 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pygmae (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b32bd936cba9e54fe9af6584c693a60e6e8b483d18e6837c8692cc4b1ada6855 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sccikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5a20e86890083935f6a937a41310e1fd22ca9f00215d56dcca5114cf6c1ddcb7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sscikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 239d315b72bd9f8c6adab453303460d2fd9c0fa05726292f752118d14a3881ec Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptocommpare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 925c4c5c8f516a9d94e78b350a442698dd39d670936d5cf087aeb3ac23e88e26 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Update now! GoAnywhere MFT zero-day patched

An emergency patch 7.1.2 has been released for an actively exploited zero-day vulnerability found in the GoAnywhere MFT administrator console. GoAnywhere MFT, which stands for managed file transfer, is a software solution that allows businesses to manage and exchange files in a secure and complia...

Malicious Package

Overview seller-base-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

OSINT your OT suppliers

There is much talk about supply chain security and reviewing your suppliers for cyber security. But how much information do they intentionally and unintentionally leak about your organisation online? We see this particularly in the industrial controls sector as its cyber security maturity is...

W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names

Threat actors have published yet another round of malicious packages to Python Package Index PyPI with the goal of delivering information-stealing malware on compromised developer machines. Interestingly, while the malware goes by a variety of names like ANGEL Stealer, Celestial Stealer, Fade...

Two Zero-day Supply Chain Attacks Found in the Python Package Index

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A zero-day supply chain attack called "aioconsol" was discovered on December 9, 2022 in a Python package published on the Python Package Index PyPI on December 6, 2022. All three versions of the package...

Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data

Cybersecurity researchers have discovered a new malicious package on the Python Package Index PyPI repository that impersonates a software development kit SDK for SentinelOne, a major cybersecurity company, as part of a campaign dubbed SentinelSneak. The package, named SentinelOne and now taken...

Trojanized Windows 10 Installer Used in Cyberattacks Against Ukrainian Government Entities

Government entities in Ukraine have been breached as part of a new campaign that leveraged trojanized versions of Windows 10 installer files to conduct post-exploitation activities. Mandiant, which discovered the "socially engineered supply chain" attack around mid-July 2022, said the malicious I...

Serious Attacks Could Have Been Staged Through This Amazon ECR Public Gallery Vulnerability

A critical security flaw has been disclosed in Amazon Elastic Container Registry ECR Public Gallery that could have been potentially exploited to stage a multitude of attacks, according to cloud security firm Lightspin. "By exploiting this vulnerability, a malicious actor could delete all images ...