coloramapkgsdow

MAL-2025-5104

PyPImalware5/18/2025
Description

Malicious code in coloramapkgsdow (PyPI)

Indicators of Compromise
SHA256 Hashes (6)
e8eaff348384a76a23b2d8f149613c9d56d6149e3a73583cebbd37b81fc55a9a
3ea93d109eaee4464d61573448dc1b4e4aa4088dc505603ef31edf7f97d3fb97
e2da29a60f5b387e349146afb12daf99754dd4c0ccdc85e09ab82a272f471873
2c07b8b1a8058a35f094f6baa72e55bca26bfb3b8bbbde78689ddf0373f698cc
1c303ea5a89f3ebb0e627a4e5a727c431f76c221d6951bd580804ea567c1d9f6
bce9ded1f986151c9b421a6ef4e749e4ea8d4616d744397254313e61b3fb74f0
References (3)
https://checkmarx.com/zero-post/python-pypi-supply-chain-attack-coloramaOSVhttps://security.snyk.io/vuln/SNYK-PYTHON-COLORAMAPKGSDOW-10305010OSVhttps://bad-packages.kam193.eu/pypi/package/coloramapkgsdowOSV
Details
EcosystemPyPI
Attack Typemalware
Published5/18/2025
Aliases
SNYK-PYTHON-COLORAMAPKGSDOW-10305010
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001