openwsea

MAL-2024-10090

PyPImalware6/28/2024
Description

Malicious code in openwsea (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
c85fbec29fe1516be6d4dbb37f8ee9b716b49e9199679576bbe58c8dbe5f8ede
158950165cf4dfb54fb0268a3dc752367bdfbcb061dd8c775df165f877ca191f
b41936686650e4685b85dc0556d806c49ef458b2bfa2a25492c8b640a7098b1e
d07954f1304eb885372b599176dade8d027023d33a049c46c2f7cd4318038f80
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openwseaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001