openesa

MAL-2024-10067

PyPImalware6/28/2024
Description

Malicious code in openesa (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
b1206af946b761364ec433e7b778710f7421d2766f75fc51a7e38b763ef9554d
7ba52c23906b3a6a9f77e28ce82f99d5f441d645a6a3af60d4f973a3ce7cba2d
70a3328185d9986ea8c57cbce23a26d53c2fb2579496b24f6aca1710cdb860ae
8f5fc2d78c4bfe86650f7be69ecdb12dc63f4a121ea190dce5e2c882133334bb
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openesaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001