Logo
pypi

kekovayalibka@0.1.1

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 6:45 PM UTC

Malicious

OSV ID

MAL-2025-191773

Ecosystem

pypi

Summary

Package is prepared to exfiltrate sensitive files. Different packages use different places for the malicious code: it runs during importing the module, is placed in a native binary, or in the setup.py script --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-xenlib Reasons (based on the campaign): - files-exfiltration

Source: kam193 (62e5215c3a679298336a19cefc6971dc3ab4d26a68a1ee1b7fdafe97b7d2c8d0)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW →SCAN DEPENDENCIES