MAL-2026-10985 Malicious code in animated-octo-spoon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 52fb3a0200c7b61bf5fc682f4d07d707c8793eff868ee0d2877de539bddd62b2 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in animated-octo-spoon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 52fb3a0200c7b61bf5fc682f4d07d707c8793eff868ee0d2877de539bddd62b2 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10978 Malicious code in reimagined-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f49aaf5b1b6388b52d7afd99359db7630e272770abd123c0cfc9977c0467b78d In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10973 Malicious code in fluffy-octo-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ed721bd4c1baf8e69a7f3c5039ac5644b8c6f0795e87fc711d3cd2b0a523c1e1 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10918 Malicious code in automatic-octo-invention (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9601d13b646d0f31e4053a8f1d2b159cba6c30b1860a67da0baa3d7d7086d9c4 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in vantrala (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e598f1a12fbd4aed3a98f1942d98fb5ca47182206f0090ac57d7927010061b37 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10867 Malicious code in vantrala (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e598f1a12fbd4aed3a98f1942d98fb5ca47182206f0090ac57d7927010061b37 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in nemopush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b1717e80fb3423ed246cbcaacb39cfa13526d2f2520a8de1229cd3388e391059 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10866 Malicious code in nemopush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b1717e80fb3423ed246cbcaacb39cfa13526d2f2520a8de1229cd3388e391059 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in kimitalk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f48f2e540e85a647f55ad2b8758c8cca9d9a6105a72058870e59d4a410c83c9f In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10865 Malicious code in kimitalk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f48f2e540e85a647f55ad2b8758c8cca9d9a6105a72058870e59d4a410c83c9f In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10864 Malicious code in kimichat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d4795d0466af3e087dba2ac688463000092f9f4fda9040a4653956a3dc2583a In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in kimichat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d4795d0466af3e087dba2ac688463000092f9f4fda9040a4653956a3dc2583a In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in playwrightr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e165b925f82629524e611c81597c32a171df7cec246dc73f268d8192ccbe2c5 setup.py registers a CustomInstallCommand that runs automatically on pip install under Windows. It uses WinHTTP via ctypes to fetch a binary from...

MAL-2026-10020 Malicious code in playwrightr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e165b925f82629524e611c81597c32a171df7cec246dc73f268d8192ccbe2c5 setup.py registers a CustomInstallCommand that runs automatically on pip install under Windows. It uses WinHTTP via ctypes to fetch a binary from...

Malicious code in pyqt6darktheme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8cd6d16792d681b160ae1e11b3f698d8fd3004cd6019704008ad1c649fbe6f67 Package downloads and runs a remote executable, which was found to downloads further exes and starting coine mining --- Category: MALICIOUS - The campaign has...

MAL-2026-6960 Malicious code in pyqt6darktheme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8cd6d16792d681b160ae1e11b3f698d8fd3004cd6019704008ad1c649fbe6f67 Package downloads and runs a remote executable, which was found to downloads further exes and starting coine mining --- Category: MALICIOUS - The campaign has...

Decentralized Threat: Stealthy P2P Cryptominer Targeting Ollama Endpoints

The Akamai SIRT uncovered a custom P2P Trojan masquerading as system activity. Learn how to detect and mitigate this stealthy Go-based cryptominer...

MAL-2026-1282 Malicious code in xmrig-miner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3d760afc863697f46cbb6716644c1e7b7e937044ee10ce72b3bce7b549cdcc8 Importing the module starts a silent cryptocurrency mining in the background for a hardcoded wallet. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in xmrig-miner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3d760afc863697f46cbb6716644c1e7b7e937044ee10ce72b3bce7b549cdcc8 Importing the module starts a silent cryptocurrency mining in the background for a hardcoded wallet. --- Category: MALICIOUS - The campaign has clearly malicio...