pypi · Malicious package advisory
Malwarepy-sysbench
MAL-2026-1280
Malicious code in py-sysbench (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (bcd34dcdc69398d2b97a0890cc550974824096b2844524f868505aa32032f147) Importing the module starts a silent cryptocurrency mining in the background for a hardcoded wallet. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-03-pyutils-helper Reasons (based on the campaign): - cryptominer
Compromised versions (1)
- 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.