VYPR
← All malware advisories

pypi · Malicious package advisory

Malware

candyurl

MAL-2023-2537

Malicious code in candyurl (PyPI)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: checkmarx (c1c2a9d1b2dd3fa0d871b516b574113e16ff2487d4540e61694c9fc9de57ce34)
EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware