Malicious code in twitter-request-diagnostics (PyPI)

Source: kam193 d437e09d0338d5b7640d3132c723bc4c77d95a052b35f7a32335a1d832c799c1 Package offers a middleware adding allegedly diagnostic endpoint to a web app. Besides allowing for env variable exfiltration, it also contains a hidden functionality allowing executing sent commands. --- Category:...

Malicious code in twitter-request-diagnostics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5b20afc78999f71a79a794a2369cfd98a2c54e4782800d52b18319d8ecb32 The package's init entrypoint starts an HTTPServer bound to 0.0.0.0:7331 that implements two unauthenticated remote-access primitives against the...