Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/08/02 12:30 p.m.•21 views

Malicious Package

Overview wacve-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.5AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/02 12:30 p.m.•6 views

Malicious code in wacve-utils (PyPI)

Source: kam193 de96a68d25555c9ee1792a22b84307ba3bc68d1e012bd841454dc775986260cb The package contains encrypted code with infostealers targeting Linux and Android execution under Termux. The encrypted code collects files, browsers data, text messages and exfiltrates them to a Telegram channel. ---...

5.9AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/08/02 10:33 a.m.•26 views

MAL-2026-11428 Malicious code in wacve-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e59800b6fa0d3429fb7bccd34b4ae292dc2668919fba704a7b16ddff71071 On import wacveutils, the package's init.py unconditionally invokes checkforupdates, which HTTP-fetches a hardcoded GitHub Gist under the user...

6.3AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/02 10:33 a.m.•40 views

Malicious code in wacve-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e59800b6fa0d3429fb7bccd34b4ae292dc2668919fba704a7b16ddff71071 On import wacveutils, the package's init.py unconditionally invokes checkforupdates, which HTTP-fetches a hardcoded GitHub Gist under the user...

6.3AI score
SaveExploits0References2
Rows per page
Query Builder