Skip to content

MALICIOUS (1) package from Python Package Index.

  1. The campaign has clearly malicious intent, like infostealers.

ln9qw38745g

Affected versions: (1) 0.1.0, 0.1.1

  1. Version numbers are usually added automatically. In most cases, the packages listed here were created only to distribute malicious code.

Package ships an embedded executable identified as malware by AV vendors, and is related to a previously discovered package that after a few releases swapt benign exe with a malicious RAT.

Campaign data

Campaign information may not always be 100% accurate for every related package.

Campaign description

The package ships a malicious executable started during the building of a wheel/installation. It has been identified as malicious by multiple vendors.

See more details on the campaign page.

RAT

Malicious activity is typical for Remote Access Trojans (RATs).

malware

Package contains or installs known malware.

override_install

The package overrides the install command in setup.py to execute malicious code during installation.

Look up in other services

  1. May not be available. See more in pypi-json-data repository.
  2. Open Source Insights project, provided by Google.
  3. Service from Socket.dev, a cybersecurity company.
  4. Spectra Assure Community, a service from ReversingLabs, a cybersecurity company.
  5. Service from Snyk, a cybersecurity company.
  6. Service from Aikido Security, a cybersecurity company. May require login.