pypi
Malicious huangpy @0.0.1
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 9:32 AM UTC
OSV ID
MAL-2024-11610
Ecosystem
pypi
Summary
Importing the module starts an infostealer attempting to exfiltrate webbrowsers' data to a Telegram webhook. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-10-huangpy Reasons (based on the campaign): - infostealer - A Telegram webhook is used to send collected data.
Source: kam193 (a914c7e2cc097ba21e12b61f176cefd1971bb2a38f3b5fe2e81038e143f27da9)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.