maxload @1.1.1
Vulnerability report · Last retrieved from osv.dev August 15, 2026 at 2:36 PM UTC
OSV ID
MAL-2025-41701
Ecosystem
pypi
Summary
Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but this behavior seems not to be triggered during analysis --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-maxload Reasons (based on the campaign): - Downloads and executes a remote executable. - peristence-autorun - A Telegram webhook is used to send collected data.
Source: kam193 (09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.