coffin-codes-pro

MAL-2024-12243

PyPImalware9/8/2024
Description

Malicious code in coffin-codes-pro (PyPI)

Indicators of Compromise
SHA256 Hashes (3)
01667c93ec6cc36bb0868affeb0e5e3aac140c8238f38feca1eac6dccdd2104b
fa99dd73d11cc6b2756fb43cff1eb16f5f80b4ffd436dbfd635b8417f821c7ba
5daf882e374b6a6f93a7da65d46e33d3917a3169d7a25eceefcea0c52be2ae53
References (2)
https://socket.dev/blog/using-trusted-protocols-against-you-gmail-as-a-c2-mechanismOSVhttps://bad-packages.kam193.eu/pypi/package/coffin-codes-proOSV
Details
EcosystemPyPI
Attack Typemalware
Published9/8/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001