MALICIOUS (1) package from Python Package Index.
- The campaign has clearly malicious intent, like infostealers.
coffin-codes-2022¶
- Metadata(1) Check in pypi-data project
- Affected versions(2) unspecified
- May not be available. See more in pypi-json-data repository.
- Version numbers are currently not tracked. Assume all versions are affected.
Campaign data¶
Campaign information may not always be 100% accurate for every related package.
Campaign description
So far, it looks like a legit tunneling software, but in tcp.py there is an attempt to send a strange email using gmail. Update: Identified as malicious by socket.dev team
See more details on the campaign page.
crypto-related
Campaign targets crypto-related.