VYPR
← All malware advisories

pypi · Malicious package advisory

Malware

py-candymaskreplace

MAL-2023-5009

Malicious code in py-candymaskreplace (PyPI)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: checkmarx (ae70491051bf40fdd4ad4290d22e3e27991f80c3ce26732e684d9db50432bad9)
EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware