PVE-2024-74373

Advisory

aiocpa is a Malicious Package, it is designed to steal cryptocurrency wallet data by exfi…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

[aiocpa] Malicious Package

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://blog.pypi.org/posts/2024-11-25-aiocpa-attack-analysis/
• https://thehackernews.com/2024/11/pypi-python-library-aiocpa-found.html
• https://security.snyk.io/vuln/SNYK-PYTHON-AIOCPA-8442272
• https://gbhackers.com/malicious-pypi-infostealer/
• https://www.reversinglabs.com/blog/malicious-pypi-crypto-pay-package-aiocpa-implants-infostealer-code
• https://pypi.org/project/aiocpa
• https://data.safetycli.com/changelogs/aiocpa/