🛡️ MAL-2025-2152 — certifications

Malicious code in certifications (PyPI)

Source: kam193

Package contains a reverse shell.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2025-03-certifications

Reasons (based on the campaign):

• The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.

Source: ossf-package-analysis

The OpenSSF Package Analysis project identified 'certifications' @ 999.999.999 (pypi) as malicious.

It is considered malicious because:

• The package communicates with a domain associated with malicious activity.