Malicious code in sinontop-utils (PyPI)

Source: kam193 2e4796f9772fd88b2cad42713f8d9b731428bea0bc0aaef2645676789636b7c1 Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other, correct uploading URLs Some of related packages only tes...

Malicious code in polymarket-data (PyPI)

Source: kam193 a690aea77d0d48fae2a4f500f434cc5d4fb5cde042b7b902b0ee647b97921dc4 The package attempts to exfiltrate sensitive data related to cryptocurrencies and API keys, as well as establish persistence. Likely related to 2026-05-polymarket-data-fetcher. --- Category: MALICIOUS - The campaign h...