The getpubip package on PyPI contains malicious code that executes an obfuscated payload during import. This payload downloads and runs an infostealer that exfiltrates browser data. The malicious code is hidden using string reversal, base64 decoding, and zlib decompression, making it difficult to detect. The package falsely advertises itself as a simple tool to retrieve the host's public IP address. Any user importing or running the package executes the concealed malicious code without further action.
The py-worm package on PyPI contains malicious code in its agentaix module that downloads and executes a mutable remote Python script without user visibility on Windows. This remote script acts as a remote access trojan (RAT), enabling persistence via an HKCU Run registry entry, polling a command server for instructions, and supporting file upload, download, deletion, and command execution. Versions 0.1.0, 2.0.0, and 2.0.1 of py-worm are affected. The remote payload is mutable, meaning its exact behavior can change over time. This package is classified as malware due to its clear intent to exfiltrate files, maintain persistence, and execute remote commands.
The saeka package on PyPI is identified as malicious software designed to perform mass credit card checking by abusing legitimate online retail services. It is part of a campaign with clear malicious intent, involving the unauthorized use of third-party APIs to validate stolen credit card data.
The npm package '@flexmr/utils' versions 1.0.0 and 3.0.12 have been identified as malicious. The package executes commands associated with malicious behavior, posing a security risk to users who install or use these versions.
The fontcase package on PyPI versions 0.1.0, 0.1.1, and 0.1.2 contains malicious code that downloads and executes an infostealer during import. This malicious behavior includes exfiltration of browser data and credentials, and uses a Telegram bot for communication. There is no information about an available patch or fix.
The sysdiagd package on PyPI is a malicious package disguised as a system monitoring tool. It functions as a Discord bot infostealer that exfiltrates credentials, browser data, files, and records audio, screenshots, and video. The malicious code requires bot credentials to operate and is not functional without them. The campaign associated with this package demonstrates clear malicious intent, including spyware-like behavior and persistence mechanisms.
The npm package @chatest/baileys versions 4.4.0 and 4.4.1 includes a dependency on an unpinned GitHub repository (libsignal-node) that can execute arbitrary code during installation. The package is branded inconsistently, suggesting potential impersonation. Installing this package can lead to full system compromise, requiring immediate secret and key rotation and package removal.
The npm package @user-interface-common/common-styles version 66.1.6 is a malicious package published as part of a dependency confusion campaign. It includes a preinstall script that runs code sending an HTTPS request to an attacker-controlled server, leaking the victim's public IP address and identifying information about the installed package. This behavior indicates that any system installing this package may be compromised.
The npm package '@mntv-analysis/workspaces-components' version 65.11.3 is a malicious package published by the user 'conx3993' as part of a dependency confusion attack. It contains a preinstall script that executes code sending an HTTPS GET request to an attacker-controlled server with a hardcoded authorization token and the installer's public IP address. This behavior acts as a reconnaissance beacon to identify victims who install the squatted package. The package itself performs no legitimate function and is considered fully compromising to any system where it is installed.
The npm package @mntv-analysis/ui-components version 50.1.1 is a malicious package published by the user 'conx3993' as part of a dependency confusion attack. It masquerades as an internal package and executes a preinstall script that sends an HTTPS request to an attacker-controlled server, leaking the victim's public IP address and signaling successful installation. The package contains no legitimate UI component code and serves solely as a tracking beacon.
The npm package '@mntv-analysis/ui' version 99.1.1 is a malicious package published by the user 'conx3993' as part of a dependency confusion attack. It masquerades as an internal package and uses a high version number to be preferentially resolved by misconfigured package resolvers. During installation, a preinstall script runs that sends an HTTPS request to an attacker-controlled server, leaking the victim's public IP address and a unique authorization token identifying the installed package. The package contains no legitimate UI functionality and acts as a beacon to tag victims. Systems with this package installed should be considered fully compromised.
The npm package 'monkey-tags-ip' version 53.4.1 is a malicious package published as part of a dependency confusion campaign. It masquerades as an internal package and executes a preinstall script that sends an HTTPS request to an attacker-controlled server, leaking the victim's public IP address and installation event. The package also declares a dependency on a third-party 'https' package, potentially introducing additional malicious code. The package has no legitimate functionality and is designed solely to beacon installation details to an external actor.
The npp-ml package on PyPI falsely claims to provide a Notepad++ distribution but instead delivers ADExplorer, an Active Directory analysis tool. This package is identified as malicious due to its deceptive nature and intent. The affected versions are 0.1.7, 0.1.8, and 0.1.9. There is no CVSS score available for this threat.
The @zanta/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that automatically subscribes the user's authenticated WhatsApp account to a specific WhatsApp Channel controlled by the publisher without user consent. This behavior occurs during the login-success event and is present in versions 1.0.0 and 1.0.1. The package does not exfiltrate credentials or maintain persistence, but it covertly inflates the publisher's channel subscribers using the victim's account.
The npm package @yudzxml/baileys contains malicious code that compromises any computer on which it is installed or running. The presence of this package indicates a full system compromise, requiring immediate rotation of all secrets and keys from a different, trusted machine. Simply removing the package does not guarantee removal of all malicious software introduced.
The npm package @xrelly-stack/bails contains malicious code that fully compromises any computer on which it is installed or running. The presence of this package means that all secrets and keys stored on the affected computer should be considered compromised and must be rotated from a separate, secure device. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The node-telegram-sockets npm package contains malicious code that fully compromises any computer on which it is installed or running. This compromise allows an attacker to gain full control over the affected system. Immediate removal of the package is recommended, but due to the extent of control gained, complete remediation may require rotating all secrets and keys from a separate, uncompromised device.
The npm package '@wanzxlonelyy/bailslonely' contains malicious code that fully compromises any computer on which it is installed or running. Removal of the package does not guarantee elimination of all malicious software, as the attacker may have gained full control. Immediate rotation of all secrets and keys stored on the affected computer is strongly advised.
The npm package @wanzlonelyy/bailslonely contains malicious code that can fully compromise any computer on which it is installed or running. The compromise may allow an attacker full control over the system, risking exposure of all stored secrets and keys. Immediate removal of the package is recommended, but due to potential persistent control, rotating all secrets from a different, trusted computer is essential.
The npm package @wanzlonely/bails4u versions 2.0.0, 3.0.0, 4.0.0, and 5.0.0 are malicious forks of the Baileys WhatsApp Web library. These versions contain injected code that silently subscribes the victim's WhatsApp account to attacker-controlled channels using the victim's authenticated session. The malicious code does not steal credentials, establish persistence, or execute arbitrary remote code, and the targeted channels are obfuscated or dynamically fetched to evade detection.