coloraiz

MAL-2025-5102

PyPIbackdoor5/16/2025
Description

Malicious code in coloraiz (PyPI)

Indicators of Compromise
SHA256 Hashes (7)
9ea259f4f90a9ba1877acd31cdbe71bc8600e20a2cb9b83ba830cbac7df1ce4b
1a7ffe6fe6d8fd9746f01735fc68e8d4a9d8bd7ab89a54c16b6a7e1bebcf8b5e
6a81e133153e897e581658ea617c5256010587413cda88c2b6670c127291e39e
dc4606b3e3f05632a889906f4c259e329a08308382fbc27329752eb8ea6a6c3c
a9c7340f11b6c6b930c65d277226188952f3c0d49712726a4d9e78113ad152d4
4f1b59ad5f047d550901ab3a30b5d6f663fea92b8ff764d6c327165b6a156363
1e4bed8653ea80abff62d06ad621c9ca63f0b99aab9110b98f2b1ae2c5b08ee0
Domains (1)
free.beeceptor.com
References (3)
https://checkmarx.com/zero-post/python-pypi-supply-chain-attack-coloramaOSVhttps://security.snyk.io/vuln/SNYK-PYTHON-COLORAIZ-10305008OSVhttps://bad-packages.kam193.eu/pypi/package/coloraizOSV
Details
EcosystemPyPI
Attack Typebackdoor
Published5/16/2025
Aliases
SNYK-PYTHON-COLORAIZ-10305008
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001