pypi · Malicious package advisory
Malwaredsidelib
MAL-2025-41666
Malicious code in dsidelib (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (5bd949196aad0e516b6c21fb6c9fc50ac76f93ca87d94490d53e3b367401df7b) Package is runs an Infostealer targeting telegram and Discord credentials. Depending on version, the infostealer is either downloaded from an URL or embedded in the package --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-dsidelib Reasons (based on the campaign): - infostealer - Downloads and executes a remote malicious script. - exfiltration-browser-data - target:telegram
Compromised versions (15)
- 0.1.0
- 0.1.1
- 0.2.0
- 0.3.0
- 0.4.0
- 1.0.0
- 1.1.0
- 1.2.0
- 1.3.0
- 2.0
- 0.5.0
- 0.6.0
- 0.7.0
- 0.8.0
- 0.9.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.