openseaz

MAL-2024-10080

PyPImalware6/28/2024
Description

Malicious code in openseaz (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
d7f9dc22c3538800d73cd91cc4f0d550257c9b864117bb1c6fb91d3eb3bc53f9
f72157a69d9d45e7a11df572a6aebbc0bfe5f3514f28836913ac882ffecb7b9e
a31789670347d825788702cfbcd712b01db782414a3048fecd5afcc3ed7f22c6
c01eff0f71e284c6eb9182f95d578576177c3c2a2df8432ba60199db7cee651b
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openseazOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001