openasea

MAL-2024-10063

PyPImalware6/28/2024
Description

Malicious code in openasea (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
be532f6718161a6d86397f0297a4e7cb5695be43e056407da28e810f5fec99d0
76205c8befdcd8107ae90a994dd76c231e4ffbb10f760335c4bde17fe27c170b
8b341e2f737b2cdad14b88c66ceb936b962e81fc63fec719b11ac94275bc16ab
85d9b03d3818f9267346304c89d33a00576f1fac74acc8bbf6f6bbc496e6441f
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openaseaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001