HIGHLY_SUSPICIOUS (1) package from Python Package Index.
- Packages that are likely malicious, but due to the obfuscation level, lack of time or clear indicators it's hard to say what exactly they do; the highest risk of false positives.
reade¶
- Metadata(1) Check in pypi-data project
- Affected versions(2) unspecified
- May not be available. See more in pypi-json-data repository.
- Version numbers are currently not tracked. Assume all versions are affected.
Campaign data¶
Campaign information may not always be 100% accurate for every related package.
Campaign description
If imported, the package attempts to execute code from a URL hidden in the README file. However, the file is not included in the package, which indicates either an issue during packaging or preparing for a usage as dependency.
Due to lack of the file, it's not possible to 100% determine intentions.
See more details on the campaign page.
remote_script
Downloads and executes a remote malicious script.