coffin-codes-2022

MAL-2024-12240

PyPImalware9/8/2024
Description

Malicious code in coffin-codes-2022 (PyPI)

Indicators of Compromise
SHA256 Hashes (3)
6e5a14df0cd2909ca01e378728dc8823478c3eca11e6c63ca629428d72247c2a
6c58561bbec76769fed6ea31b26a57f72ff7242de59c7c6f297a14b56f9b547e
217486707eb73a1a70a4807c4e87bdad2c4ca3368341137c02bcb1a9ae202ba5
References (2)
https://socket.dev/blog/using-trusted-protocols-against-you-gmail-as-a-c2-mechanismOSVhttps://bad-packages.kam193.eu/pypi/package/coffin-codes-2022OSV
Details
EcosystemPyPI
Attack Typemalware
Published9/8/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001