Malicious code in fromthehotel-poems (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475b2190d4001e511377932ffc1a8ce15c6003305c057837911b9ebae0699e48 The package's documented public API getdaily performs an HTTPS fetch to https://login.fromthehotel.com/api/poems/code, passes the response body to...

MAL-2026-17897 Malicious code in fromthehotel-poems (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475b2190d4001e511377932ffc1a8ce15c6003305c057837911b9ebae0699e48 The package's documented public API getdaily performs an HTTPS fetch to https://login.fromthehotel.com/api/poems/code, passes the response body to...

Malicious code in asti (PyPI)

Source: kam193 524f4f92d8a8c1b63e0164ce77b8185d9ec4d4ce345751a1883923351bdcfdbc The provided functionality hides code that exfiltrates files to a remote location. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-asti Reasons based on the...

Malicious code in tcloud-python-sdks (PyPI)

Source: kam193 601415ac1e4afe43331c4b78d99e406f34b4a970a365a366cdc0598c5cb22f9c This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote server, 2 packages named like alicloud-client are clones of...

Malicious code in socketxio (PyPI)

Source: kam193 0ebdf2a14543a49aa2f1b1fdeb5a713a43da8326a370249ca370d9023283fb31 Using the provided function results in exfiltrating Discord tokens to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-02-old-socketxio Reason...

Malicious code in ighack (PyPI)

Source: kam193 889207a729f6b97c385d6c0afe217776d10331cdf7e5dd511f80e0d01e899842 Instagram hacking tool that besides abusing the Instagram API, also automatically uses user's credentials to follow hardcoded accounts. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in darkig (PyPI)

Source: kam193 7589c67c4429eabd010f891cb17f893ee11ec3cb873d4a31095cc3592134f762 Instagram hacking tool that also forces the user to follow hardcoded accounts. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-03-old-nai Reasons based on the...