readmecolorama

MAL-2025-5126

PyPImalware5/18/2025
Description

Malicious code in readmecolorama (PyPI)

Indicators of Compromise
SHA256 Hashes (6)
7cad9d6c1364c940f087a52f3136ddbcd1e2e7e9118de880284237a1d839055f
c0f43da6669cf9a48e88ad211fe0d2db630c4e94668c3a1feb12d5fef4db7d53
55c2f9671efb3bc3772a29971fae2313022349abe5970a426c36e305e5c25538
4f74e374afe61cdaa52e0c651ae413abc94b50cd15de263a9d247de21bfc6fa1
f19060de81fafe38f1b4cb199a4b1e81561dfb03f5b7138a0bc48c6654f3c929
8c7bf735728e56da8fed531f236ac6f6b4cad05c269cd4591e9268f11c421e5c
References (3)
https://checkmarx.com/zero-post/python-pypi-supply-chain-attack-coloramaOSVhttps://security.snyk.io/vuln/SNYK-PYTHON-READMECOLORAMA-10305013OSVhttps://bad-packages.kam193.eu/pypi/package/readmecoloramaOSV
Details
EcosystemPyPI
Attack Typemalware
Published5/18/2025
Aliases
SNYK-PYTHON-READMECOLORAMA-10305013
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001