openxsa

MAL-2024-10091

PyPImalware6/28/2024
Description

Malicious code in openxsa (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
fe5637f6d47cc27bea51a0c9872f33329703aeef76e8e0ab73dc90cfcca3089d
fb45a11c7457020ff39267410ac4a15d2c3e504cbc77277b4124415c09a73b98
1dc09d335569f4bb7b2976eda83423c9a4f5e8681ba256aed6f1c5eb58df262b
80a513e68a44e2a6e04e029767916007321c136347afbee6b6b37f8e000e5d20
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openxsaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001