ethrum

MAL-2024-10020

PyPImalware6/28/2024
Description

Malicious code in ethrum (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
8f61d3a4dec3efc19672bfd7f187d609eabfe03f7a5085b7b8442ac025ac1b20
16a8c3cdeb86aab6643b7cac7b184f5a25fe86aa71e54bebdc5b10a625e826fb
a0cce0d9b6be0d0e35ea4ea899bd021f0434fd4e6e5d1e686ea5f2aba5fa4225
066522525c2bea947c51dc87b2a2d6973848be1ca6a996c02fbcf8cec15594f9
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/ethrumOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001