web3-pu

MAL-2024-10204

PyPImalware6/28/2024
Description

Malicious code in web3-pu (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
c6fb76918604f8dfd2a40c1b5c72c28d681df999b640099fe4cf4cbd46ae4c7c
05977bbd80f7626b2d7e4a9ad1fa0f6a7c6ccdcb6848cfa7bb562d8eeca0df16
38ffa42756f9ee22c0746a8ca035d477c81f75b5f52042b17fec1100310269d7
ed9a516f2d64227cd436eb9a04057b4b7220a47fde2309ddd4a22371b952268e
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/web3-puOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001