MALICIOUS (1) campaign cataloged at 2026-07-31(2).
- The campaign has clearly malicious intent, like infostealers.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2026-07-telerape¶
Package places a reverse shell in the PTH file. In analyzed versions, the target was on localhost.
Abuse categories¶
abuses-pth
The package uses .pth files, sitecustomize or usercustomize modules to execute malicious code during Python startup, even without importing the package code manually.
revshell
The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.