Skip to content

MALICIOUS (1) package from Python Package Index.

  1. The campaign has clearly malicious intent, like infostealers.

veriftest1asdlaa

  1. May not be available. See more in pypi-json-data repository.
  2. Version numbers are currently not tracked. Assume all versions are affected.

Campaign data

Campaign information may not always be 100% accurate for every related package.

Campaign description

During installation, the package attempts to exfiltrate cloud tokens

See more details on the campaign page.

exfiltration_cloud_tokens

Campaign targets exfiltration_cloud_tokens.

override_install

The package overrides the install command in setup.py to execute malicious code during installation.