HIGHLY_SUSPICIOUS (1) campaign cataloged at 2024-11-24(2).
- Packages that are likely malicious, but due to the obfuscation level, lack of time or clear indicators it's hard to say what exactly they do; the highest risk of false positives.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2024-11-fast-dler¶
Obviously LLM-generated package that let you download and execute file from the URL. While the package itself doesn't have any malicious content, it could be used by malware to hide the action.
Abuse categories¶
remote_executable
Downloads and executes a remote executable.