The fromthehotel-poems PyPI package version 0.1.0 includes a function getdaily() that fetches and executes remote Python code from an external server without verification. This allows whoever controls the server or can tamper with the response to execute arbitrary code with the full privileges of the calling process. The package is identified as malicious, with intent to exploit large language model agents by hiding remote code execution within its API.
The npm package 'asistenyorstore' version 8.0.14 contains malicious code that uses an authenticated WhatsApp session to auto-follow newsletters controlled by the package author. The package fetches remote JSON lists from mutable URLs and issues follow requests on behalf of the installer's account without exfiltrating credentials or executing remote code. Despite no direct data theft, any system with this package installed should be considered fully compromised due to potential unauthorized control. Immediate removal and secret/key rotation are advised.
The PyPI package 'proxyrobika' version 0.1.0 contains malicious code designed for automated file exfiltration. This package is part of a campaign targeting Android devices with clear malicious intent, specifically infostealing activities.
The npm package buyerdashboard@45.3.4 contains malicious code that executes during installation. Its preinstall script runs a Node.js script that sends a request to an external domain with a hardcoded authorization token, disclosing the installing host's public IP and metadata without user consent. The package also depends on a suspicious similarly named package that shadows a core Node module, indicating potential dependency confusion. The package's metadata and versioning suggest it is designed to evade detection and perform unauthorized data exfiltration.
The npm package xapi-lib versions 88.2.3, 88.2.5, 90.2.1, and 90.3.1 contains malicious code that executes a preinstall script during npm install. This script sends an HTTP request with a hardcoded authorization header to an external domain unrelated to the package's stated functionality, potentially exposing the installer's IP and environment. The package itself provides no legitimate library functionality and is considered fully malicious.
The npm package web-pixels-manager@76.2.4 is a typosquatted malicious package impersonating Shopify's @shopify/web-pixels-manager. It executes a preinstall script that makes an outbound HTTPS request to a non-affiliated domain realwbx.com with a hardcoded authorization token. This behavior enables the operator of realwbx.com to track installations of the package, effectively creating a victim check-in channel.
The npm package idlive-face-capture-web-development@78.8.1 contains malicious code that executes a preinstall script making an unauthorized HTTPS request to a third-party server with a hardcoded authorization token. This behavior leaks the installer's IP address, User-Agent, and install timing, confirming successful execution to an attacker-controlled server. The package identity is inconsistent and indicative of a dependency confusion or typosquatting attempt. Installation of this package may lead to full compromise of the host system.
The getpubip package on PyPI contains malicious code that executes an obfuscated payload during import. This payload downloads and runs an infostealer that exfiltrates browser data. The malicious code is hidden using string reversal, base64 decoding, and zlib decompression, making it difficult to detect. The package falsely advertises itself as a simple tool to retrieve the host's public IP address. Any user importing or running the package executes the concealed malicious code without further action.
The py-worm package on PyPI contains malicious code in its agentaix module that downloads and executes a mutable remote Python script without user visibility on Windows. This remote script acts as a remote access trojan (RAT), enabling persistence via an HKCU Run registry entry, polling a command server for instructions, and supporting file upload, download, deletion, and command execution. Versions 0.1.0, 2.0.0, and 2.0.1 of py-worm are affected. The remote payload is mutable, meaning its exact behavior can change over time. This package is classified as malware due to its clear intent to exfiltrate files, maintain persistence, and execute remote commands.
The saeka package on PyPI is identified as malicious software designed to perform mass credit card checking by abusing legitimate online retail services. It is part of a campaign with clear malicious intent, involving the unauthorized use of third-party APIs to validate stolen credit card data.
The npm package '@flexmr/utils' versions 1.0.0 and 3.0.12 have been identified as malicious. The package executes commands associated with malicious behavior, posing a security risk to users who install or use these versions.
The fontcase package on PyPI versions 0.1.0, 0.1.1, and 0.1.2 contains malicious code that downloads and executes an infostealer during import. This malicious behavior includes exfiltration of browser data and credentials, and uses a Telegram bot for communication. There is no information about an available patch or fix.
The sysdiagd package on PyPI is a malicious package disguised as a system monitoring tool. It functions as a Discord bot infostealer that exfiltrates credentials, browser data, files, and records audio, screenshots, and video. The malicious code requires bot credentials to operate and is not functional without them. The campaign associated with this package demonstrates clear malicious intent, including spyware-like behavior and persistence mechanisms.
The npm package @chatest/baileys versions 4.4.0 and 4.4.1 includes a dependency on an unpinned GitHub repository (libsignal-node) that can execute arbitrary code during installation. The package is branded inconsistently, suggesting potential impersonation. Installing this package can lead to full system compromise, requiring immediate secret and key rotation and package removal.
The npm package @user-interface-common/common-styles version 66.1.6 is a malicious package published as part of a dependency confusion campaign. It includes a preinstall script that runs code sending an HTTPS request to an attacker-controlled server, leaking the victim's public IP address and identifying information about the installed package. This behavior indicates that any system installing this package may be compromised.
The npm package '@mntv-analysis/workspaces-components' version 65.11.3 is a malicious package published by the user 'conx3993' as part of a dependency confusion attack. It contains a preinstall script that executes code sending an HTTPS GET request to an attacker-controlled server with a hardcoded authorization token and the installer's public IP address. This behavior acts as a reconnaissance beacon to identify victims who install the squatted package. The package itself performs no legitimate function and is considered fully compromising to any system where it is installed.
The npm package @mntv-analysis/ui-components version 50.1.1 is a malicious package published by the user 'conx3993' as part of a dependency confusion attack. It masquerades as an internal package and executes a preinstall script that sends an HTTPS request to an attacker-controlled server, leaking the victim's public IP address and signaling successful installation. The package contains no legitimate UI component code and serves solely as a tracking beacon.
The npm package '@mntv-analysis/ui' version 99.1.1 is a malicious package published by the user 'conx3993' as part of a dependency confusion attack. It masquerades as an internal package and uses a high version number to be preferentially resolved by misconfigured package resolvers. During installation, a preinstall script runs that sends an HTTPS request to an attacker-controlled server, leaking the victim's public IP address and a unique authorization token identifying the installed package. The package contains no legitimate UI functionality and acts as a beacon to tag victims. Systems with this package installed should be considered fully compromised.
The npm package 'monkey-tags-ip' version 53.4.1 is a malicious package published as part of a dependency confusion campaign. It masquerades as an internal package and executes a preinstall script that sends an HTTPS request to an attacker-controlled server, leaking the victim's public IP address and installation event. The package also declares a dependency on a third-party 'https' package, potentially introducing additional malicious code. The package has no legitimate functionality and is designed solely to beacon installation details to an external actor.
The npp-ml package on PyPI falsely claims to provide a Notepad++ distribution but instead delivers ADExplorer, an Active Directory analysis tool. This package is identified as malicious due to its deceptive nature and intent. The affected versions are 0.1.7, 0.1.8, and 0.1.9. There is no CVSS score available for this threat.