Malicious
OSV ID
MAL-2025-191724
Ecosystem
pypi
Summary
Clone of Telethon package that exfiltrates credentials. See client/telegrambaseclient.py L608-626 (exfiltration function) and client/auth.py L163 (usage). --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-04-fastgram Reasons (based on the campaign): - clones-real-package - action-hidden-in-lib-usage - exfiltration-generic
Source: kam193 (bbc47050a01cdb07bbf87c6a6f47028545200c85d553a4952b686a705a6d7d3c)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.