openeaa

MAL-2024-10064

PyPImalware6/28/2024
Description

Malicious code in openeaa (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
13e2654f563b3c1d7f548c180110f8105941ebabfce24f31986f5a0592c79655
8bb9fbc3cc806e8a8243753867301026210c876869091e184b467fe3a5602d03
2a55e9a83b349df0696d3e0c99c0475a733ddd07f81ce3edb78fa40bb76cab9b
f2266ca8f4ca476d94d79ff51afdf341995e14b4c2f6aa7dfaa447a40281157d
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openeaaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001