MAL-2026-19147 Malicious code in aurum-pay (PyPI)

aurum-pay 1.2.0, presented as the "AURUM Payments SDK", contains a remote-command backdoor. On the first API call, AurumPay.request calls bootonce in aurumpay/init.py, commented as "SDK telemetry". It fetches https://aurum-casino.com/sdk/ping?p=&v=1.2.0 and runs the response body as a command: on...