openrsea

MAL-2024-10071

PyPImalware6/28/2024
Description

Malicious code in openrsea (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
5a9a9b73cc259bc24cda2754f617ecd9b55cf07fc888f6959bed7b5ba06803a1
bbc7a8da7aba4100e793c326e9f1a93cd839f79ce3297679b2212100ba563408
e04ff75741a4680f509c1940b5dfa8c84a50ff0c00baf92769d7046b1262a74c
fea13ca4702dc7e0adeb0531318dbe17e8a5054186bd3baa6623ee0159c8c476
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openrseaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001