openseax

MAL-2024-10079

PyPImalware6/28/2024
Description

Malicious code in openseax (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
0a1e346758bfa5a44ffd5c451d710c10228741aa5fd1e6eaea973512ebc44c58
055ee5cce961485325990de0634fb329cc1d548e21b134568ec728e7ae25a920
ec03d53d7d2432e27da1d77449f8fb3988d72c9ad4c7d9950dffa1fa0830e3c5
69f140f2cf5d85a524f58b5bdbdc302ab5c4e937d11f0fd7bddb2e95eb765168
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openseaxOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001