Malicious code in uncrypt (PyPI)

Source: kam193 f391bbd6f86e9108de1a5de9d0131658bf5a637b768f724f536976e125d5b0c2 During import, the package silently starts the embedded executable which existence is not disclosed to the user. Dynamic analysis suggests the code harvests browser data and communicates with an external domain. ---...

Malicious Package

Overview uncrypt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...