VYPR
← All malware advisories

pypi · Malicious package advisory

Malware

bsb-backup

MAL-2025-2621

Malicious code in bsb-backup (PyPI)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: oracle-using-macaron (7c8850cc513318b8ede38268eed0fee01ba44c81087cd289294b63bada9f394c)
This package decodes and executes a script during installation to set up a Telegram bot for device event monitoring. However, the code is obfuscated, making it difficult to comprehend and obscuring its true intent.

Compromised versions (1)

  • 2.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.