pypi · Malicious package advisory
Malwareaioasyncsqlite
MAL-2025-4203
Malicious code in aioasyncsqlite (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (9dabf7e852a633394c9df21ee491c5a3582e2c172c624fd2b48cc127dbdc410a) Clone of aiosqlite with hidden exfiltration of selected data during "executeall" query (see L59-97) --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-04-aiolitesql Reasons (based on the campaign): - clones-real-package - action-hidden-in-lib-usage - exfiltration-generic
Compromised versions (1)
- 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.