coloramapkgs

MAL-2025-5103

PyPImalware5/18/2025
Description

Malicious code in coloramapkgs (PyPI)

Indicators of Compromise
SHA256 Hashes (6)
efc88346f3157cc7360fc21a7ca23c80fb5b85449a1d9d032da0663226bb574a
d25a2fe2e2d149f4e4b6a8e845af645d3c010746046697df3cfab153efbd03cc
8e056102962434c232d56b9bf1f5f796b05ee736e5e5dbd8db83c5e875a39118
c7f00bfa67a0d8743c0d46766e677dce5d28db461505c662fcb8cd9efc4b2417
b8b99a3de6ecc503a82a203de6604ca200c1f3402853c072b6b0a6e03a9bb29d
0b9255fa5393c8379097e4cd11c56ea783637fa444563e90b7cb5826242abbdd
References (3)
https://checkmarx.com/zero-post/python-pypi-supply-chain-attack-coloramaOSVhttps://security.snyk.io/vuln/SNYK-PYTHON-COLORAMAPKGS-10305012OSVhttps://bad-packages.kam193.eu/pypi/package/coloramapkgsOSV
Details
EcosystemPyPI
Attack Typemalware
Published5/18/2025
Aliases
SNYK-PYTHON-COLORAMAPKGS-10305012
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001