web3q

MAL-2024-10210

PyPImalware6/28/2024
Description

Malicious code in web3q (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
5745fb39230d5fe563bcf3b52a59071f54dac62ae398bdac38e09beda917743b
e60cfc2a9a7f01e7593408cd4e9d3de58186b7256b72487ad3dd197cc7b63e12
db10d0be8fec6d6af3700f474b25e3085d3bfcabcb4c84e8751a6e91ac81007c
ccf4bd72b94d06a7bf2ab4c845b20b45660cedf0455a5af4f448b2e0c8cbe381
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/web3qOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001