discord-dev

MAL-2024-5061

PyPImalware6/25/2024

Description

Malicious code in discord-dev (PyPI)

Indicators of Compromise

SHA256 Hashes (2)

fe80d11c1d712dbd7ecb6405d78d7496da78af06151671c42058e69ad5a643ee

5b2c02ecca8ca7aa69790466c487b37f7cca660a4df3d727a3c0cb2caf786b65

References (3)

https://blog.phylum.io/a-deep-dive-into-powerat-a-newly-discovered-stealer-rat-combo-polluting-pypi/OSV https://research.jfrog.com/malicious-packages/OSV https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-create-cloudflare-tunnels-to-bypass-firewalls/OSV

Details

EcosystemPyPI

Attack Typemalware

Published6/25/2024

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001