pypi · Malicious package advisory
Malwaremultithreadedexecution
MAL-2025-191798
Malicious code in multithreadedexecution (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (3248950b032e1381ddc79d43dfdba8fb6dccce4b1afafd5825e560d793b3bd09) Once run, package downloads and installs an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-discord-selfsbotsx Reasons (based on the campaign): - Downloads and executes a remote executable. - infostealer - malware - peristence-autorun
Compromised versions (1)
- 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.