pypi · Malicious package advisory
Malwarelibsocks5
MAL-2024-5326
Malicious code in libsocks5 (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (f9d745820f944dd4aaf916168db7546fdd4689ac873f85166e92e87329caa3f9) --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2023-11-update-information-endpoint Reasons (based on the campaign): - obfuscation - The package overrides the install command in setup.py to execute malicious code during installation. - typosquatting
Compromised versions (6)
- 1.7.4
- 1.7.0
- 1.1.1
- 1.7.3
- 1.7.2
- 1.7.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.