openwsaa

MAL-2024-10088

PyPImalware6/28/2024
Description

Malicious code in openwsaa (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
12ced0ad3fa58729e1025ee6bcdc6ec81ae31142e611a20862a5a72f3e07e6c4
013dc21a19e667878a1702d4bf397c09fcdfd7bbb45cc2bd774f78d97c06f33a
7fab4b6cf69d7c696ddad690fd74df945da947a4d854be7e58e30f871cd6edb0
cbec132112d30adb41a4d55e0f4209c968c7953d02dc00bbece5386ab94a93ae
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openwsaaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001