Malicious code in zhopaorlaaato (PyPI)

Source: kam193 45a24b1a49c10f50578e74364357b8de8d31ee62b997c0db957bc0474c841fd7 Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded in the package --- Category: MALICIOUS - The campaign has...

Malicious code in httpsyncer (PyPI)

Source: kam193 3e9323dbc11b949e9970ead2dcc1c5a7f05348a977591f8c86027ee220c86b62 Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded in the package --- Category: MALICIOUS - The campaign has...

Malicious code in dziplib (PyPI)

Source: kam193 4330efb5db5e6d840d35a3da3ca6f6ad39fadff7e37e78745b9e092d365a7ded Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded in the package --- Category: MALICIOUS - The campaign has...

MAL-2025-191847 Malicious code in pytzv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7b0a2cddf6ee0cc4d688f4136758e0d7aaa99707aa5dd82505d84631d77720 Importing the module starts exfiltration of ".session" files, which appear to be used at least by one Telegram library...

Malicious code in neov (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c9e3f275318dc63c36dbc902dfd73c0b3aa4fa830d114c0833ed8d24258d9b0 Importing the module starts exfiltration of ".session" files, which appear to be used at least by one Telegram library...