opensew

MAL-2024-10084

PyPImalware6/28/2024
Description

Malicious code in opensew (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
9056d0881d4b53b5ee0850f9c82861a485b2ca749b4bfac12a06ed937d0c3da1
2a0cfbe606ccf3dcb6fd81c0bd0960b31b6d422c45c3a1be49af19b95fca4fe3
ffa6753393d986731290af6d134273da8701dc295fa7eea213ab0a78dd299246
bf2ebfbb8590fd5da5e1bee31e1ea5dcc4ac141f0f78f4758008c1cd02e4a67a
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/opensewOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001