Malicious
OSV ID
MAL-2025-191783
Ecosystem
pypi
Summary
Malicious clone of a legitimate "loguru" package. There is added code to download and run an executable. Sandbox analysis reveals attempts to steal browsers data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-logguru Reasons (based on the campaign): - clones-real-package - Downloads and executes a remote executable. - infostealer - typosquatting
Source: kam193 (64b91d48504c05711a759a1cb2a0bfd63650f47d05d04296bbea6269ed4229b4)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.