Malicious Package

Overview spo365-graph is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in spo365-graph (PyPI)

Source: kam193 ea8dd7600717964f4ca8f8b1134f867f4bf69f1538243d5c7da752eefed99fe1 During installation, the package deploys a rogue AWS Lambda function to collect credentials from Secret Manager as well as collect other data. Data are then exfiltrated. The malicious code was introduced in version...

Malicious code in spo365-graph (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091649f7b927b27a5bd7a35b53784433050bf58e0dc11acc95316b650a13f60b SPO365-GRAPH presents itself as a SharePoint Online Graph client, but the shipped library module SPO365GRAPH/SPO365GRAPH.py consists entirely of stub...

MAL-2026-17421 Malicious code in spo365-graph (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091649f7b927b27a5bd7a35b53784433050bf58e0dc11acc95316b650a13f60b SPO365-GRAPH presents itself as a SharePoint Online Graph client, but the shipped library module SPO365GRAPH/SPO365GRAPH.py consists entirely of stub...