pypi · Malicious package advisory
Malwarerandom-ua-generator
MAL-2026-11068
Malicious code in random-ua-generator (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (543206058a0b8e85c8227a0bfdd4752fc61779b24968a0bd5d50ae6b3040387b) During import, the code starts a keylogger and exfiltrates data from cryptowallets. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-random-ua-generator Reasons (based on the campaign): - keylogger - exfiltration-crypto
Compromised versions (1)
- 0.0.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.