The 'twitch-stream-py' package on PyPI was found to be a malicious clone of a legitimate package. It contains obfuscated code that downloads and executes a remote script with malicious intent. The remote script was not accessible during analysis. The campaign was identified by Threx-code and is categorized as malware due to its behavior resembling infostealers.
The pyuserox package version 0.0.2 on PyPI was found to silently download and execute remote malicious code during import. The remote code was no longer accessible during analysis, but the package's behavior indicates clear malicious intent. This campaign was discovered by Threx-code and is categorized as malware due to its capability to execute unauthorized remote scripts.
The pyuserfox package version 0.0.2 on PyPI was found to silently download and execute remote malicious code during import. The remote code is no longer accessible, but the package's behavior indicates clear malicious intent. This campaign was discovered by Threx-code and is categorized as malware.
The gcp-log-poc package on PyPI contains malicious code that exfiltrates environment information, including potentially sensitive environment variables, during import. This behavior is intended to steal basic system data such as IP address and username. The package versions 0.0.1, 0.0.2, and 0.0.3 are affected. The risk is considered limited but clearly malicious.
The qzc690384 package on PyPI contains malicious code that executes during installation by overriding the install command. It performs environment fingerprinting, exfiltrates basic system data such as IP address and username, and sets up a backdoor server to receive remote commands. The package downloads further commands from a hardcoded location and appears to prepare for additional stages of attack. This behavior is confirmed as part of a malicious campaign targeting users who install this package.
The qzc690383 package on PyPI contains malicious code that executes during installation. It collects detailed host system information and sends it encoded to a local Xinference server, enabling an operator with access to that server to retrieve the host fingerprint. The package does not provide legitimate functionality and performs this reconnaissance even on a simple install.
The PyPI package 'qzc690382' version 1.0.0 contains malicious code that activates during installation. Its setup.py script writes and launches a persistent Python HTTP server on multiple ports, exposing a network-accessible shell that executes arbitrary shell commands received via HTTP GET requests. This backdoor runs with the privileges of the installing user and is unrelated to any legitimate functionality.
The PyPI package 'qzc690385' versions 1.0.0 and 1.0.1 contains malicious code that installs a Python HTTP server on installation. This server listens on multiple ports and allows remote execution of arbitrary shell commands via HTTP GET requests authenticated by a hardcoded token. Additionally, the package abuses a local Xinference API to execute code and exfiltrate host reconnaissance data encoded within model registration payloads. The package provides no legitimate functionality and is designed for stealthy remote control and data gathering.
The genblaze-atlascloud package on PyPI version 0.1.0 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The genblaze-fal package on PyPI version 0.1.0 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The dsh-notify-focus npm package contains malicious code that fully compromises any computer on which it is installed or running. Removal of the package does not guarantee elimination of all malicious software installed as a result. Immediate rotation of all secrets and keys stored on the affected computer is strongly advised.
The pulumi-doppler package on PyPI contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The npm package @cherrydotfun/miniapp-sdk versions 0.1.22 and 0.1.23 contain malicious code. Any computer with this package installed or running is considered fully compromised, potentially allowing an attacker full control. Immediate removal of the package and rotation of all secrets and keys from a different computer are strongly advised.
The PyPI package 'fhqiouhq' version 0.1.0 contains malicious code that exfiltrates sensitive Telegram files to a remote location upon import. This package is identified as part of a typosquatting campaign targeting Telegram users, aiming to steal information.
The PyPI package 'ajfhiuqhfqgwerhuqnfqh' version 0.1.0 contains malicious code that exfiltrates sensitive Telegram files to a remote location during import. This package is identified as part of a typosquatting campaign targeting Telegram users with clear malicious intent to steal information.
The PyPI package 'reqnests' versions 0.1.0 and 0.1.1 contains malicious code that exfiltrates sensitive Telegram files to a remote location upon import. This is a typosquatting campaign with clear malicious intent targeting Telegram data.
The PyPI package 'reqnest' version 0.1.0 contains malicious code that exfiltrates sensitive Telegram files to a remote location upon import. This package is identified as a typosquatting attempt with clear malicious intent targeting Telegram data.
The tailwind-animationfound package on npm contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, secure machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by its installation.
The npm package 'modelsdesk' version 0.4.2 contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential exposure of all secrets and keys stored on the affected system. Immediate removal of the package is recommended, but due to the extent of control given to the attacker, complete remediation cannot be guaranteed by removal alone.
The npm package 'kampodine' version 0.8.0 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.