pypi · Malicious package advisory
Malwareln9qw38745g
MAL-2026-18583
Malicious code in ln9qw38745g (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (e0a9c91e26a02abe14a9881a1c539a2f48d71aff120be6a4c286f36ee4cdd603) Package ships an embedded executable identified as malware by AV vendors, and is related to a previously discovered package that after a few releases swapt benign exe with a malicious RAT. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-11-filipt Reasons (based on the campaign): - The package overrides the install command in setup.py to execute malicious code during installation. - malware - rat
Compromised versions (2)
- 0.1.0
- 0.1.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.