monoliht

MAL-2024-11637

PyPItyposquat11/6/2024
Description

Malicious code in monoliht (PyPI)

Indicators of Compromise
SHA256 Hashes (6)
cef596a040e3ec0d5c4e1e57ed55f6b4ba45ec9499a11aeb380e9dc20b1f8ecb
9738d61d2d0302737c16e6750e7c3684334bc574a84c7ea6d0d3537c2072cb68
8c296a18c7ad4626603f55c9b78b4fe0086dff2e75e18e75fc28d5f71bf08db8
b0594d4897f61df4c3fce7993c0b5070f13b76f785a7a964bff40e65b566bfd5
e0ad0e82dca177218b12e78a9c3020cbef92db7a793565807a8d042402f26f06
15dd0429057d5ea8e413f36d3a104c43d3cd289200e2d83b48192df9bc20bb62
Domains (1)
byted-dast.com
References (3)
https://security.snyk.io/vuln/SNYK-PYTHON-MONOLIHT-8602090OSVhttps://socket.dev/blog/weaponizing-oast-how-malicious-packages-exploit-npm-pypi-and-rubygemsOSVhttps://bad-packages.kam193.eu/pypi/package/monolihtOSV
Details
EcosystemPyPI
Attack Typetyposquat
Published11/6/2024
Aliases
SNYK-PYTHON-MONOLIHT-8602090
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001