coffin2022

MAL-2024-12245

PyPImalware9/8/2024
Description

Malicious code in coffin2022 (PyPI)

Indicators of Compromise
SHA256 Hashes (3)
c619ce983137ded3d34941bd6ef4893b1546d80c141cb9da36cbf122e4aef971
2f875ec44c758a726a21474b433c8f43af3d2ee96a3bdcca60f75288316b95ae
7ac2db08cc88b0b26ee8c0ddeef399ccc5a870de9173e251a10f164d78934a67
References (2)
https://socket.dev/blog/using-trusted-protocols-against-you-gmail-as-a-c2-mechanismOSVhttps://bad-packages.kam193.eu/pypi/package/coffin2022OSV
Details
EcosystemPyPI
Attack Typemalware
Published9/8/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001