-= Per source details. Do not edit below this line.=-
EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware
{ "malicious-packages-origins": [ { "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" } ] } ], "modified_time": "2023-08-24T20:12:58Z", "sha256": "3cf8e469fd324a2e6ca72bc88c884d7a4a6d75e1331d1af38ecc780a3e6e7e68", "import_time": "2023-08-24T15:12:11.804930952Z", "source": "checkmarx" } ], "iocs": { "urls": [ "https://dl.dropbox.com/s/tpykidpdjz99202/esquele.exe", "https://cdn.discordapp.com/attachments/1090710876639744062/1102575056925761587/bypass2.ps1" ] } }