pypi · Malicious package advisory
Malwareimad213tools
MAL-2025-191764
Malicious code in imad213tools (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (2cddffd96538ab03979aa6404e3c946258e49677220c4820f3a8f0972b31cb17) Encrypted code offering massive sending Instagram followers. 1) besides of using some shady services to achieve the goal, it also exfiltrates saved Instagram credentials to a remote server; 2) the project page offers selling an "exploit" for Instagram servers --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-imad213tools Reasons (based on the campaign): - exfiltration-credentials - other - obfuscation
Compromised versions (2)
- 1.0.0
- 213
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.