openwae

MAL-2024-10086

PyPImalware6/28/2024
Description

Malicious code in openwae (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
b29da0f0847f5b3a896d768357c9886329ed7cd4c59b7a404dc05d1a0bd7a40f
979d00f028f24fa0e881b7b30110da16cebdd4baaea715833cdef258caecfe77
264db26b8ff2f7f028376af04ab699a9af68748247df9f8fd7aee3a31bf02866
66ad1f0ceb2b30058cdaa6c4343fa4477cd85e67d8ae889b55f09041eeaabeff
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openwaeOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001