VYPR

pypi · Malicious package advisory

Malware

poly-check-b

MAL-2026-16407

Malicious code in poly-check-b (PyPI)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: kam193 (0e03276b0825e5aa683a1edd8c9a7f9947888cd03cde8c5351895a0fa3c2fba6)
During installation, the package attempts to silently execute code. In analyzed versions, the payload file was missing.


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2026-09-snap-queue


Reasons (based on the campaign):


 - The package overrides the install command in setup.py to execute malicious code during installation.

Compromised versions (1)

  • 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.