MALICIOUS (1) package from Python Package Index.

1. The campaign has clearly malicious intent, like infostealers.

kingwork-test

Affected versions: unspecified (1)

1. Version numbers are currently not tracked. Assume all versions are affected.

The package contains the same code to deobfuscate code as in previous packages, but the malicious code itself is missing

Campaign data

Campaign information may not always be 100% accurate for every related package.

Campaign description

Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of legitimate https://pypi.org/project/coinanalyse/ package.

See more details on the campaign page.

backdoor

Campaign targets backdoor.

clons_real_package

The package is a clone of a real package, but with malicious code added.

crypto-related

Campaign targets crypto-related.

obfuscation

Campaign targets obfuscation.

remote_commands

The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.

typosquatting

Campaign targets typosquatting.

Look up in other services

• Check metadata in pypi-data project (1)
• Search for the package in deps.dev(2)
• Search for the package in socket.dev (3)
• Search for the package in secure.software (4)

1. May not be available. See more in pypi-json-data repository.
2. Open Source Insights project, provided by Google.
3. Service from Socket.dev, a cybersecurity company.
4. Spectra Assure Community, a service from ReversingLabs, a cybersecurity company.