flask-auth-system@0.0.2

Summary

On importing the module, the code attempts to span a reverse shell. In the current version, the remote domain does not exist --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-04-flask-auth-sys Reasons (based on the campaign): - dependency-confusion - The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine. - obfuscation

Source: kam193 (debc87eb7af33e5146831c7e1b8ff69ccdebe2c9bbf353216c719b10ebe8431c)