MALICIOUS (1) campaign cataloged at 2026-02-14(2).
- The campaign has clearly malicious intent, like infostealers.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2026-02-old-platforms¶
During importing, the code automatically starts a Telegram bot designed to download and save files locally upon a specific message in the channel. While this seems to have limited harm, this behavior is not disclosed and involved packages have typosquatting-like names. The core code is in the "platforms" package
Abuse categories¶
other
Campaign uses other.
through_dependency
The malicious code is intentionally included in a dependency of the package
typosquatting
The package name is an typosquatting variant of a popular package.