Skip to content

MALICIOUS (1) campaign cataloged at 2026-11-06(2).

  1. The campaign has clearly malicious intent, like infostealers.
  2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2026-11-reqnest

During import, package exfiltrates sensitive Telegram files to a remote location.

Abuse categories

files_exfiltration

Campaign uses files_exfiltration.

target:telegram

The package is designed to target Telegram users or the Telegram platform.

typosquatting

The package name is an typosquatting variant of a popular package.

Packages in the campaign

campaign:2026-11-reqnest