opensa

MAL-2024-10072

PyPImalware6/28/2024
Description

Malicious code in opensa (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
2e1d5da9d64f69a876062f6774d974e8bc0cc62174eb4eb467d91d9cea2d6c74
3b6a275c8ca2358abc2ce7ca7b3e7836aad5ec3c30d984522130d92491356161
3e5b38df8bc96ba2c5f91308161eb7d3f3442ba12b74a7a62b558235899de63b
8858656c457f17f9bc315d521508d6fc928cb585e66605b434451ba5d68b3c54
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/opensaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001