ethereumm

MAL-2024-9990

PyPImalware6/28/2024
Description

Malicious code in ethereumm (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
4779bbb764300396b62b68fe931c431c5aa756a89f6410d0dc1d08a9a94176fe
ee17dbaf613e6fb11d16e5b7151631859618ec3b9dde938d4c5e6823f0067dc5
dbe19886543c7545e49f7ace6b40c40364ff619989785b490cb704972ab17e40
ab81544af36d64eedbab17aec0ea69ced070402577e7c6f92700ae7aa58b5f63
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/ethereummOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001