opensear

MAL-2024-10078

PyPImalware6/28/2024
Description

Malicious code in opensear (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
5a1275587db79e8cc73a107ac03a3fe5faa2b2b1ea6822b8f0dd7ce9119e1f4f
af9c88ba5301d407f77ba5bacb35280b7297e70c4ea613c68c400e80408dc717
5925cc4bda2e06149c449e0547aa921624cdd6b3a9783ec1857d081492ce1169
c3824bc3b633857c29d43a4e404e08520af94a414d29e9a2992e51906c7b3878
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/opensearOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001