lightgboost

MAL-2025-191781

PyPItyposquat2/5/2025
Description

Malicious code in lightgboost (PyPI)

Indicators of Compromise
SHA256 Hashes (3)
3fd3a060a03299dbc51f4da7eb22da7503ad93f0a3347d23c0965dd2dda24e8a
03aea882aa08832e53ccfb267fe4b95c9ea4f24ea51ceeaaa4a85557e67ce15b
5ef72e3b6a7a1136f4bea0d3d1779e74ae3b5a9e49c87494cbb5c8bb8566a3ad
IP Addresses (1)
35.170.187.220
References (1)
https://bad-packages.kam193.eu/pypi/package/lightgboostOSV
Details
EcosystemPyPI
Attack Typetyposquat
Published2/5/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001