MALICIOUS (1) campaign cataloged at 2026-08-18(2).

1. The campaign has clearly malicious intent, like infostealers.
2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2026-08-reqcrypt

The package contains a hidden backdoor. The promised functionality is an HTTP request library with some additional functions. On every usage, code secretly checks for the presence of specific fields in the response, and if they are found, their content is secretly executed.

Abuse categories

backdoor

Campaign uses backdoor.

Packages in the campaign

campaign:2026-08-reqcrypt

• reqcrypt