coffin-grave

MAL-2024-12244

PyPImalware9/8/2024
Description

Malicious code in coffin-grave (PyPI)

Indicators of Compromise
SHA256 Hashes (3)
7143490975064e6efe7355bc4bdcb3f0fdbfdd15189866f4644b606a4ce5070e
21110452950ae0dced9cfd59dd55627b8634f47f3dd2be36558c338437532fac
a1ae928d532cfbbb14416f7ffadb785e42ca701b8bffb038dd037a721d4749ad
References (2)
https://socket.dev/blog/using-trusted-protocols-against-you-gmail-as-a-c2-mechanismOSVhttps://bad-packages.kam193.eu/pypi/package/coffin-graveOSV
Details
EcosystemPyPI
Attack Typemalware
Published9/8/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001