toddkarin / global-land-mask

Check whether a lat/lon point is on land for any point on earth
MIT License
102 stars 16 forks source link

Malware in the package, do not execute #7

Open iklobato opened 2 years ago

iklobato commented 2 years ago

In one of the first lines of the globe.py file a malicious compressed file called globe_combined_mask_compressed.npz is loaded in path.

Screen Shot 2021-11-02 at 23 11 09

It is responsible for loading the file into memory.

_mask_filename = os.path.join(_path,'globe_combined_mask_compressed.npz')
_mask_fid = np.load(_mask_filename)

I found it strange a coordinate calculation using a hidden library, and decided to pass the file in the VirusTotal website. This library when executed is malicious and contains malware.

Screen Shot 2021-11-02 at 23 11 37

HERE IS the link

n0kovo commented 2 years ago

Definitely a false positive.