Skip to content

MALICIOUS (1) package from Python Package Index.

  1. The campaign has clearly malicious intent, like infostealers.

zyto

Affected versions: (1) 0.2.0, 0.2.1, 0.2.2, 0.2.3

  1. Version numbers are usually added automatically. In most cases, the packages listed here were created only to distribute malicious code.

The package ships an executable started during the building of a wheel/installation. It has been identified as malicious by some AV vendors, but primarily it is a preparation to embed a RAT as in another campaign's package.

Campaign data

Campaign information may not always be 100% accurate for every related package.

Campaign description

The package ships a malicious executable started during the building of a wheel/installation. It has been identified as malicious by multiple vendors.

See more details on the campaign page.

RAT

Malicious activity is typical for Remote Access Trojans (RATs).

malware

Package contains or installs known malware.

override_install

The package overrides the install command in setup.py to execute malicious code during installation.

Look up in other services

  1. May not be available. See more in pypi-json-data repository.
  2. Open Source Insights project, provided by Google.
  3. Service from Socket.dev, a cybersecurity company.
  4. Spectra Assure Community, a service from ReversingLabs, a cybersecurity company.
  5. Service from Snyk, a cybersecurity company.
  6. Service from Aikido Security, a cybersecurity company. May require login.