Malicious Package

Overview pafex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in pafex (PyPI)

Source: kam193 8ad1f51a6f081ac9e46b3d3ffa2d0b9b150b1600caf826d940f4e3d1992cda16 In this campaign, the main package resion has an embeded pickle disguised as a config. A related dependency pafex contains code to load the pickle. During unpickling, malicious code embeded in the pickle file is...

Malicious code in resion (PyPI)

Source: kam193 2e9e3ce373adb26e45616eec47d727e557f5a696737cb2fbcaa66fb7dc7b7c3e Description: In this campaign, the main package resion has an embeded pickle disguised as a config. A related dependency pafex contains code to load the pickle. During unpickling, malicious code embeded in the pickle...

MAL-2026-18094 Malicious code in pafex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f048e6c59bed3c95094e9baaf28b7234a917300b81a4c81db0eb0a3f859ff4e3 No install-time or import-time network I/O, credential access, subprocess execution, or other installer-harm behavior was observed in this package...

Malicious code in pafex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f048e6c59bed3c95094e9baaf28b7234a917300b81a4c81db0eb0a3f859ff4e3 No install-time or import-time network I/O, credential access, subprocess execution, or other installer-harm behavior was observed in this package...

MAL-2026-18095 Malicious code in resion (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b4088658d04bc0725d06a035fa9d83254699e6c26ce3653433199de9b10821 No a static rule matches were produced for this package version, and no concrete behavioral evidence of credential access, install-time code executio...

Malicious code in resion (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b4088658d04bc0725d06a035fa9d83254699e6c26ce3653433199de9b10821 No a static rule matches were produced for this package version, and no concrete behavioral evidence of credential access, install-time code executio...