The RubyGem 'control-character-command-injection' version 1.0.1 contains malicious code executed during installation. This code collects sensitive host information including hostname, username, current working directory, home directory, and contents of system files such as /etc/resolv.conf, /etc/passwd, and /etc/hosts. It then sends this data via a TLS connection to an external, unauthorized server. This exfiltration occurs automatically without user interaction.
The RubyGem 'agentic-call-control' version 1.1.8 contains malicious code in its native extension script that executes during installation. This script collects sensitive host information including directory paths, hostname, login name, and contents of system files such as /etc/resolv.conf, /etc/passwd, and /etc/hosts. It then serializes this data as JSON and exfiltrates it over TLS to an attacker-controlled domain. Additionally, it performs a DNS lookup to the same domain as an out-of-band beacon. This behavior is unrelated to any legitimate build or installation process and constitutes unauthorized data harvesting and exfiltration.
The RubyGem 'dynamic-object-handler' version 1.0.1 contains malicious code in its native extension mkrf_conf.rb. During installation, it collects sensitive system information including directory paths, hostname, login name, and contents of critical system files. This data is exfiltrated via a TLS-encrypted POST request to a hardcoded Burp Collaborator subdomain, enabling out-of-band confirmation of code execution even if outbound TCP/443 is blocked.
The donjon-ledger RubyGem version 2.0.2 contains malicious code executed during installation. The gemspec declares a native extension that runs a Ruby script collecting host identifiers and sensitive system files, then exfiltrates this data over a TLS connection to a hardcoded external server. This behavior occurs automatically when the gem is installed, without any legitimate build activity.
The blender-headless package on PyPI contains malicious code that leaks the installer's hostname and import events via DNS queries to an external domain. This occurs during both package installation and module import, bypassing typical HTTP egress controls. The package's module name and package name are unrelated, and its only behavior is this DNS beaconing.
The PyPI package 'infra-libs' version 99.99.99 performs unauthorized DNS exfiltration of the installer's hostname during installation and import. It constructs DNS queries embedding the hostname to a suspicious external domain unrelated to the publisher, with no legitimate functionality justifying this behavior. This package name is confusable with internal infrastructure libraries, increasing risk of dependency confusion attacks.
The PyPI package 'expect-tests' version 99.99.99 contains malicious code that exfiltrates the installer's hostname by encoding it into a subdomain and triggering DNS resolution to an unauthorized external server. This behavior occurs both during package installation and when the installed module is imported. The package exhibits suspicious characteristics such as a misleading version number and mismatched package and module names, consistent with a dependency confusion or name-squatting attack.
The rainbowcolors package on PyPI, version 0.1.0, masquerades as an ANSI-color helper but downloads and executes a malicious binary on Windows systems. Upon the first use of any color method, it fetches an executable from an anonymous file-sharing URL, saves it to a temporary folder, and runs it detached from the console. It also modifies Microsoft Defender settings to exclude the drop folder and executable from antivirus scanning, facilitating stealthy execution of the malicious payload.
The PyPI package 'chromacli' versions 0.1.0 through 0.1.4 contains malicious code that downloads and executes an unsigned Windows executable from an anonymous file-sharing site. This executable is saved to a temporary folder and launched in a detached process. The package also disables Microsoft Defender detection for the dropped binary by adding exclusions via PowerShell commands. The malicious behavior is unrelated to the package's stated purpose as a terminal color library and is characteristic of malware droppers delivering infostealers.
The npm package @htooayelwinict/travis234 version 3.3.2 contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package and rotation of all secrets and keys from a different, uncompromised computer is strongly advised. However, removal of the package alone may not eliminate all malicious software introduced by this package.
The 'twitch-stream-py' package on PyPI was found to be a malicious clone of a legitimate package. It contains obfuscated code that downloads and executes a remote script with malicious intent. The remote script was not accessible during analysis. The campaign was identified by Threx-code and is categorized as malware due to its behavior resembling infostealers.
The pyuserox package version 0.0.2 on PyPI was found to silently download and execute remote malicious code during import. The remote code was no longer accessible during analysis, but the package's behavior indicates clear malicious intent. This campaign was discovered by Threx-code and is categorized as malware due to its capability to execute unauthorized remote scripts.
The pyuserfox package version 0.0.2 on PyPI was found to silently download and execute remote malicious code during import. The remote code is no longer accessible, but the package's behavior indicates clear malicious intent. This campaign was discovered by Threx-code and is categorized as malware.
The gcp-log-poc package on PyPI contains malicious code that exfiltrates environment information, including potentially sensitive environment variables, during import. This behavior is intended to steal basic system data such as IP address and username. The package versions 0.0.1, 0.0.2, and 0.0.3 are affected. The risk is considered limited but clearly malicious.
The qzc690384 package on PyPI contains malicious code that executes during installation by overriding the install command. It performs environment fingerprinting, exfiltrates basic system data such as IP address and username, and sets up a backdoor server to receive remote commands. The package downloads further commands from a hardcoded location and appears to prepare for additional stages of attack. This behavior is confirmed as part of a malicious campaign targeting users who install this package.
The qzc690383 package on PyPI contains malicious code that executes during installation. It collects detailed host system information and sends it encoded to a local Xinference server, enabling an operator with access to that server to retrieve the host fingerprint. The package does not provide legitimate functionality and performs this reconnaissance even on a simple install.
The PyPI package 'qzc690382' version 1.0.0 contains malicious code that activates during installation. Its setup.py script writes and launches a persistent Python HTTP server on multiple ports, exposing a network-accessible shell that executes arbitrary shell commands received via HTTP GET requests. This backdoor runs with the privileges of the installing user and is unrelated to any legitimate functionality.
The PyPI package 'qzc690385' versions 1.0.0 and 1.0.1 contains malicious code that installs a Python HTTP server on installation. This server listens on multiple ports and allows remote execution of arbitrary shell commands via HTTP GET requests authenticated by a hardcoded token. Additionally, the package abuses a local Xinference API to execute code and exfiltrate host reconnaissance data encoded within model registration payloads. The package provides no legitimate functionality and is designed for stealthy remote control and data gathering.
The genblaze-atlascloud package on PyPI version 0.1.0 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The genblaze-fal package on PyPI version 0.1.0 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.