octopus32 @0.1.1
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 5:33 PM UTC
OSV ID
MAL-2025-5122
Ecosystem
pypi
Summary
The obfuscated code downloads and starts a remote executable. The remote file has limited detection in VT, but contains at least code to add Defender exclusion paths. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-05-octopus32 Reasons (based on the campaign): - Downloads and executes a remote executable. - obfuscation
Source: kam193 (15fe4c8243ee2e3d9bb59df9134466819fdcb2e151cc4d79568dc4eb2dea9ac9)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.