HIGHLY_SUSPICIOUS (1) campaign cataloged at 2025-08-03(2).

1. Packages that are likely malicious, but due to the obfuscation level, lack of time or clear indicators it's hard to say what exactly they do; the highest risk of false positives.
2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2025-08-rsacracker

Package uses strong obfuscation to hide the behavior. The current final code seems not to do anything beside the described functionality

Abuse categories

obfuscation

Code uses obfuscation techniques to hide its true purpose.

Packages in the campaign

campaign:2025-08-rsacracker

• rsacracker