openzsea

MAL-2024-10095

PyPImalware6/28/2024
Description

Malicious code in openzsea (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
148ef3f9e08365732efd73e8ce7a63bf696d28aef18d03fb8c7e70ba652c0eba
3d59271d63d582ba9322877a4a9ee20baf7b4bc150397c39d5fc0294e0d8d32b
17ca0b734a90f2a5de10d45a3271f2d49a0772fc64f1b9349e9a1947df29b5dc
c0bfeeda6adc4ddd86b36df85d548c2f4738569d87cae8bd79c60aed63b658cd
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/openzseaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001