HIGH_RISK_HACKING_TOOLS (1) package from Python Package Index.
- Packages that are very likely to be used to build or as part of a malware, in most cases. They are not malicious on their own, but are quite a good indicator of something suspicious
vfunctions¶
Affected versions: (1) 0.0.1, 0.0.2, 0.0.3
- Version numbers are usually added automatically. In most cases, the packages listed here were created only to distribute malicious code.
Collection of hacking tools with the goal to perform user-annoying actions (changing background, playing offensive sounds), self-propagation to other files and USB drives, as well as collecting webcam photos and ensuring persistence. While it's not active (no automated start, requires someone to steer the execution), it was clearly created to perform malicious action, there is no educational value.
Campaign data¶
Campaign information may not always be 100% accurate for every related package.
Look up in other services¶
- Check metadata in pypi-data project (1)
- Search for the package in deps.dev(2)
- Search for the package in socket.dev (3)
- Search for the package in secure.software (4)
- Search for the package in Snyk Advisor (5)
- May not be available. See more in pypi-json-data repository.
- Open Source Insights project, provided by Google.
- Service from Socket.dev, a cybersecurity company.
- Spectra Assure Community, a service from ReversingLabs, a cybersecurity company.
- Service from Snyk, a cybersecurity company.