The flyteplugins-redis package version 2.6.10 on PyPI contains malicious code that exfiltrates basic host information such as IP address and username during installation or import. The package overrides the install command in setup.py to execute this malicious behavior. The package appears to have no legitimate purpose beyond this data exfiltration.
The PyPI package flyteplugins-nsight version 2.6.10 contains malicious code that exfiltrates basic host information such as IP address and username during installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It appears to be a low-risk package primarily used for pentesting or research purposes with limited harm potential.
The PyPI package flyteplugins-agento11y version 2.6.10 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The flyteplugins-echo package on PyPI version 2.6.10 contains malicious code that exfiltrates basic host information such as IP address and username during installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The PyPI package 'decoris' versions 0.3.0 and 0.3.3 contain malicious code designed to exfiltrate Roblox cookies from infected machines. This behavior classifies the package as an infostealer with clear malicious intent. There is no CVSS score available for this threat. No known exploits in the wild have been reported. No official patch or remediation guidance is provided in the available data.
The sap-quarterly-report package version 1.0.0 on PyPI contains malicious code that collects sensitive information during import and exfiltrates it via DNS queries. This behavior classifies it as a malicious package with intent to steal information, including credentials. There is no known patch or fix available, and no evidence of active exploitation in the wild has been reported.
The ekx-report-utils package on PyPI contains malicious code that executes automatically upon import. It reads a session credential from a local file and uses it to make an authenticated request to a sandbox service. The response data, including private thread contents authorized by the token, is covertly exfiltrated via DNS queries using TLS SNI fields to evade network inspection. This behavior is inconsistent with the package's stated purpose and occurs without user interaction.
The PyPI package 'mathkitlite' version 0.1.0 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in its setup.py to execute this malicious behavior. It appears to have no legitimate functionality beyond this data exfiltration.
The pybitjs package on PyPI contains malicious code that executes during installation and every Python interpreter startup. It uses obfuscated JavaScript to fetch attacker-controlled payloads via a command-and-control mechanism leveraging Ethereum blockchain transactions to dynamically determine the C2 server IP. The payload downloads and executes further malicious code, consistent with campaigns attributed to the Lazarus APT group. This allows arbitrary code execution on the host system of anyone installing or running Python with this package present.
The PyPI package '0xfighter3' version 0.1 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond data exfiltration and is categorized as a low-harm pentest-like package.
The PyPI package bigquery-agent-analytics-tracing versions 0.0.0 and 0.0.1 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond data exfiltration and is classified as a low-risk malicious package resembling pentest tools.
The PyPI package 'rce-test' version 0.1 contains malicious code that executes during installation by overriding the install command in setup.py. This code exfiltrates basic system information such as IP address and username. The package has no legitimate purpose beyond this data exfiltration and is categorized as a low-harm pentest-like package.
The PyPI package 'syntaxerror-package-12345' version 0.1 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The python-walletlibr-v PyPI package is a malicious package masquerading as a wallet library but contains no wallet functionality. Instead, it executes arbitrary local commands during installation on Windows by creating and running a batch file and launching the calculator application. This behavior occurs automatically during pip install and is unrelated to any legitimate functionality.
The multyproccess package on PyPI contains malicious code that executes during installation. It acts as an infostealer, exfiltrating browser data and cryptocurrency wallet information, establishing persistence on the infected system, monitoring the clipboard, and evading sandbox detection. The package uses typosquatting and clones a legitimate package to deceive users. The malicious behavior is triggered by overriding the install command in setup.py and includes code obfuscation.
The envprovision package on PyPI, versions 1.2.0, 1.3.0, and 1.4.0, masquerades as an environment diagnostics helper but contains malicious code. On Windows, it downloads and executes a binary from an obfuscated URL without TLS verification, enabling man-in-the-middle substitution. The binary installs a persistent, heavily obfuscated malware known as "Snow Stealer," which steals browser data and modifies cryptowallet applications. It also attempts to evade detection by clearing Windows event logs and using sandbox evasion techniques.
A malicious PyPI package named 'cryptgraphy' impersonates legitimate cryptography and AWS-related packages using typosquatting and falsified metadata. Upon installation, it executes a custom install script that delays for five minutes before downloading and running an ELF binary from an unrelated external server. The binary attempts to establish persistence, potentially via systemd services, and is associated with malicious activities such as cryptocurrency mining and network propagation. The package itself contains only stub functions, with the real malicious behavior occurring during installation. This campaign exhibits clear malicious intent and anti-forensic techniques.
The mlflow-otel-instrumentor package on PyPI impersonates AWS support but contains malicious code. During installation, it downloads and executes an unsigned ELF binary that runs as a background process. The payload attempts persistence, network scanning, and cryptocurrency mining. The package is a typosquatting attempt with clear malicious intent.
NLTK versions 3.10.0 through 3.10.2 contain a remote code execution vulnerability in the AllowlistUnpickler component. The flaw arises because the unpickler validates only the pickle module string but not the full global name, enabling attackers to traverse attributes and invoke callables outside the intended allowlist. Maliciously crafted transition-parser models can exploit this to execute arbitrary commands during model loading. This vulnerability is fixed in version 3.10.3.
NLTK versions 3.9.4 through 3.10.2 have a path traversal vulnerability in the CrubadanCorpusReader component. This flaw allows an attacker controlling a corpus package to disclose arbitrary files outside the intended corpus directory by exploiting improper path joining and file opening logic. The vulnerability is limited to files ending with '-3grams.txt' that are parsed as token count lines.