opensar

MAL-2024-10074

PyPImalware6/28/2024
Description

Malicious code in opensar (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
57f40b790528c5c5119592a514eef9dd1b842ab2307cff41232ceba40a50b5d2
e6ef8b3042894d4b194147e667c1e4dcf7a0f4647d987a633b908f4ae0dd43a3
a2b194067d7fe54be83a453f0811c940aad8d821a556702f4907bda22d3eb3d1
28131cba4135426fc25267d46b7f137559afb1998e78c0e2bfb6eaa5a345dcf8
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/opensarOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001