pypi · Malicious package advisory
Malwarelegendevil1
MAL-2026-256
Malicious code in legendevil1 (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (3188a850ecb974606264f28634afaca67ec2f49c1c759cf590aa39ba19e50452) Package is designed to download and execute a remote script, which then downloads and runs a malicious executable --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-pdatainstaller Reasons (based on the campaign): - Downloads and executes a remote executable. - Downloads and executes a remote malicious script. - malware
Compromised versions (1)
- 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.