pyefflorer

MAL-2023-8570

PyPImalware10/5/2023

Description

Malicious code in pyefflorer (PyPI)

Indicators of Compromise

SHA256 Hashes (2)

9db59fb1fff1df375feb9a17164f004b62a2d5fa194dcc285341536b6bfb51aa

eca396a5a824b7e16bb60ccf05f1619c55d8e6c3457ac12b443bede4bc81a6e1

IP Addresses (1)

51.178.25.148

References (3)

https://medium.com/checkmarx-security/attacker-hidden-in-plain-sight-for-nearly-six-months-targeting-python-developers-3712f0f107e0OSV https://security.snyk.io/vuln/SNYK-PYTHON-PYEFFLORER-6069635OSV https://checkmarx.com/blog/attacker-hidden-in-plain-sight-for-nearly-six-months-targeting-python-developers/OSV

Details

EcosystemPyPI

Attack Typemalware

Published10/5/2023

Aliases

SNYK-PYTHON-PYEFFLORER-6069635

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001