Live threat intelligence radar

The ferrotts package on PyPI version 0.1.0 is part of a coordinated campaign involving loader packages that download and execute remote malicious scripts. Although the package itself does not contain the payload, its purpose is to facilitate execution of malicious code from external URLs. This activity is classified as malware due to its clear malicious intent.

The flowmetry package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that download and execute remote malicious scripts. These packages do not contain the payload themselves but serve as deceptive loaders to execute malicious code from external URLs.

The garviscope package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that download and execute remote malicious scripts. Although the packages themselves do not contain the payload, their intent is clearly malicious, designed to facilitate execution of harmful code from external sources.

Multiple security vulnerabilities have been identified in the perl-CGI module used in Red Hat Enterprise Linux 8. These include a denial of service via unenforced request and upload limits, arbitrary file write through unsanitized upload filenames, and a security feature bypass via untainted request parameters. Red Hat has issued an important security advisory with updates to address these issues.

The evalometer package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that execute code from remote URLs. Although the packages themselves do not contain the malicious payload, they facilitate downloading and executing remote malicious scripts, indicating clear malicious intent.

The wavforge package on PyPI version 0.1.0 is part of a coordinated campaign involving loader packages designed to download and execute remote malicious scripts. While the packages themselves do not contain the payload, their intent is clearly malicious, facilitating the execution of potentially harmful code from external sources.

The phoneliasr package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that download and execute remote malicious scripts. While the package itself does not contain the payload, it facilitates the execution of potentially harmful code from external sources.

The garvisuite package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that download and execute remote malicious scripts. These packages do not contain the payload themselves but serve as deceptive loaders to facilitate malicious code execution.

The lumitts package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that execute code from remote URLs. Although the packages themselves do not contain the malicious payload, they facilitate the download and execution of remote malicious scripts. This campaign is identified as having clear malicious intent, including potential infostealing activities.

The spectrova package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that download and execute remote malicious scripts. Although the packages themselves do not contain the payload, their intent is clearly malicious as they facilitate execution of harmful code from external sources.