hexdec

MAL-2025-191629

PyPImalware10/10/2025
Description

Malicious code in hexdec (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
d41993213ac2cf02f89474c549705d4876f7a2d22df79169b01ff1929f2066b3
25805398a6ec40a078afc03c1bb44ea7bfb3cbc2fd51d723d58ee955b1586992
b35c77c73cb594ed27985ac5e797ed54657a3301e976728e8fdf06dedb94e085
cc55d51f64b873d1a89725dca0bd785aa589f30239cd9c8149b9513be2a340f3
Domains (4)
68076f26e81df7060eba3e58.mockapi.io66c0dc0bba6f27ca9a57c4bf.mockapi.io67b9f37c51192bd378dee810.mockapi.ioreda-sequestered-justine.ngrok-free.dev
References (2)
https://en.wikipedia.org/wiki/Tron_(blockchain)OSVhttps://bad-packages.kam193.eu/pypi/package/hexdecOSV
Details
EcosystemPyPI
Attack Typemalware
Published10/10/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001