pypi
Maliciousmarocolor@1.0.0
Vulnerability report · Last retrieved from osv.dev October 16, 2026 at 2:11 PM UTC
OSV ID
MAL-2026-17900
Ecosystem
pypi
Summary
Package is intended for stealing files to a hardcoded location and performing a DoS on the victim's machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-marocolor Reasons (based on the campaign): - files-exfiltration - uses-telegram-bot - destructive-actions
Source: kam193 (38b0fa2ee77af46ad9daf78c024a0f599fd0798eef7605cb3eed50d8db65fa22)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.