piphttps

MAL-2024-5530

PyPImalware6/25/2024

Description

Malicious code in piphttps (PyPI)

Indicators of Compromise

SHA256 Hashes (2)

caeeb41fcd74ad23ed7f5b303711a3837ba8cc035e85eeeda57a59845889b41a

c346f972e4402e3ef8b26da6876b687db61ebd3bd4960fd70508cbb879f9b748

References (2)

https://www.reversinglabs.com/blog/beware-impostor-http-libraries-lurk-on-pypiOSV https://research.jfrog.com/malicious-packages/OSV

Details

EcosystemPyPI

Attack Typemalware

Published6/25/2024

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001