vtk-osmesa

MAL-2025-5847

PyPImalware7/14/2025
Description

Malicious code in vtk-osmesa (PyPI)

Indicators of Compromise
SHA256 Hashes (10)
c7551fe96e5c82f2d015f2192ef59cb289a105d8549b9d18285d3fd33e7f1bf4
fbfa8dae1a6eed56bd9367ae529bbf25fac65af65e367d222b02b701c149210e
61c30b8c639fc2130b0d95047bc880aa792747c9ea7bf54dcd2a36e1d3019739
8309b0e4c8f1581d8b20bb4f161e856c87d46e367861eb44153b074406b1d2fe
4751cac9deec1e341e0e7e761dfd8ea8c89830a61df5fd58841e242de8c0eb33
ae51c0b2d806da87b9849d348545680dd2510318e9158cfeec9e03f2735e09f6
4402cf1d7c9b050e1bba2b0ae07a4e73c7ba0255ee7b4cb05f9bf540055ee018
910e787804512eabe1c118f5347fed9f57ca936717e18a80d26622108d75399e
db413462206456c3d72b71effefb95ecbc50f84bba26ca3600c6592f9268db61
eb6b8a31b588385619a873ad0f75aadd35512e39b211404042970b917230644f
Domains (1)
deadly-polished-snail.ngrok-free.app
References (1)
https://bad-packages.kam193.eu/pypi/package/vtk-osmesaOSV
Details
EcosystemPyPI
Attack Typemalware
Published7/14/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001