Malicious Package

Overview ig-gox is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in ig-gox (PyPI)

Source: kam193 780638a0747103eb44a85312a2cfb552981e498655f638c5baf86eb4a5f74042 Package hides obfuscated code aimed to avoid analysis and downloading the remote stage. The remote code is used to abuse Instagram service for mass fake account registration. --- Category: MALICIOUS - The campaign has...

Malicious code in ig-gox (PyPI)

Importing iggox runs iggox/init.py, which decodes a blob base64, XOR, zlib after a few anti-debugging checks and execs it as main. The decoded loader only goes on if it looks like a physical Android device running Termux it turns away x86, emulators and VMs, installs requests and cryptography if...

MAL-2026-17712 Malicious code in ig-gox (PyPI)

Importing iggox runs iggox/init.py, which decodes a blob base64, XOR, zlib after a few anti-debugging checks and execs it as main. The decoded loader only goes on if it looks like a physical Android device running Termux it turns away x86, emulators and VMs, installs requests and cryptography if...