MAL-2024-12261

    Dashboard / Malicious Package / MAL-2024-12261

    MAL-2024-12261

    Published: 21 Sept 2024Last Modified: 12 Dec 2025

    Summary: Malicious code in easypydb (PyPI)

    Details: Source: kam193 (6bba8fa7c973e17898962b7fa6aebecdd0d9149b9e3a1f078bbc57f5e4bf7f0a) The package is a wrapper around "s1db" package, which offers some kind of easy online database. However, this package silently exfiltrates credentials given by people and sends them to a Discord webhook, effectively allowing stealing data. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-09-old-easypydb Reasons (based on the campaign): - action-hidden-in-lib-usage - exfiltration-generic -

    References: https://bad-packages.kam193.eu/pypi/package/easypydb

    Affected packages

    Package

    Name: easypydb

    Purl: pkg:pypi/easypydb

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.4.4
    MAL-2024-12261 | CVE-DB