mal-2026-18584
pysec
Description
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (8fb01cc262b8645b045f6d9b6e0454ef525c928a48f8c0904cb63301f1be9e0f) When started as a module, package runs an embedded executable identified as an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-11-protecteda Reasons (based on the campaign): - infostealer - malware
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
Linked Vulnerabilities
No linked vulnerabilities found.
{
"affected": [
{
"database_specific": {
"source": "https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/protecteda/MAL-2026-18584.json"
},
"package": {
"ecosystem": "PyPI",
"name": "protecteda",
"purl": "pkg:pypi/protecteda"
},
"versions": [
"0.1.0"
]
}
],
"credits": [
{
"contact": [
"https://github.com/kam193",
"https://bad-packages.kam193.eu/"
],
"name": "Kamil Mańkowski (kam193)",
"type": "REPORTER"
}
],
"database_specific": {
"malicious-packages-origins": [
{
"id": "pypi/2026-11-protecteda/protecteda",
"import_time": "2026-11-03T23:11:26.663640724Z",
"modified_time": "2026-11-03T22:50:47.51385Z",
"sha256": "8fb01cc262b8645b045f6d9b6e0454ef525c928a48f8c0904cb63301f1be9e0f",
"source": "kam193",
"versions": [
"0.1.0"
]
}
]
},
"details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (8fb01cc262b8645b045f6d9b6e0454ef525c928a48f8c0904cb63301f1be9e0f)\nWhen started as a module, package runs an embedded executable identified as an infostealer.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-protecteda\n\n\nReasons (based on the campaign):\n\n\n - infostealer\n\n\n - malware\n",
"id": "MAL-2026-18584",
"modified": "2026-11-03T23:15:03.169847715Z",
"published": "2026-11-03T22:50:47Z",
"references": [
{
"type": "EVIDENCE",
"url": "https://www.virustotal.com/gui/file/2444b8efc91ad48ae8bc21a5492ca99fe0661508b04f5c346d562f580015ca2c/detection"
},
{
"type": "EVIDENCE",
"url": "https://tria.ge/261103-2nalrazz3k"
},
{
"type": "WEB",
"url": "https://bad-packages.kam193.eu/pypi/package/protecteda"
}
],
"schema_version": "1.9.2",
"summary": "Malicious code in protecteda (PyPI)"
}