we3-py

MAL-2024-10197

PyPImalware6/28/2024
Description

Malicious code in we3-py (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
3a68b5e9d22913e2b4382b0a460eecc5a6583c39f99c150c3ec6ae45cb5c24b9
42adf5cfccef2d9dc1607e733fe91419f85f36cef0bce50ef542d956b26374a9
2058e037355515616c251a2832a04f499c04908dd626a964a82d19088764aaf4
31c54d25ae4f9aa5be4044af275a6658b4dc73aaada019b6d9dca0a18e5c93a9
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/we3-pyOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001