Launch Week Day 1: Announcing Security Design Review
CRITICAL PyPI Malware

Malicious code in example-pypi-package-loler1 (PyPI)

MAL-2024-12267

Published ยท Modified

Description


__

Source: kam193 (bb19218b6d780973bde55d613a16a9a637728a4d01e79d570bb3406633f0f639)

Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm.


Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: GENERIC-simple-tests

Reasons (based on the campaign):

  • The package overrides the install command in setup.py to execute malicious code during installation.

Ready to move

Start Securing

Free, no credit card | First findings in minutes