OSV ID
MAL-2026-17712
Ecosystem
pypi
Summary
Package hides obfuscated code aimed to avoid analysis and downloading the remote stage. The remote code is used to abuse Instagram service for mass fake account registration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-ig-gox Reasons (based on the campaign): - The package contains code to detect if it is running in a sandbox environment. - obfuscation - Downloads and executes a remote malicious script. - abusing-3rd-api
Source: kam193 (780638a0747103eb44a85312a2cfb552981e498655f638c5baf86eb4a5f74042)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.