piepunk

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: kam193 (40c9660a52e99412daf32818f5263ad562bf43281984b9676aa93874912132be)
This is a clone of "pymunk" package. In the space.py file there is a code that attempts to exfiltrate data from the Discord client during initialization. L101:129


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2024-12-piepunk


Reasons (based on the campaign):


 - exfiltration-generic


 - infostealer


 - clones-real-package


 - action-hidden-in-lib-usage

Compromised versions (3)

• 6.9.0
• 6.9.1
• 6.9.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.