wacve-utils @1.0.7
Vulnerability report · Last retrieved from osv.dev August 2, 2026 at 1:46 PM UTC
OSV ID
MAL-2026-11428
Ecosystem
pypi
Summary
The package contains encrypted code with infostealers targeting Linux and Android (execution under Termux). The encrypted code collects files, browsers data, text messages and exfiltrates them to a Telegram channel. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-wacve-utils Reasons (based on the campaign): - files-exfiltration - exfiltration-browser-data - uses-telegram-bot - obfuscation - Downloads and executes a remote malicious script. - infostealer
Source: kam193 (de96a68d25555c9ee1792a22b84307ba3bc68d1e012bd841454dc775986260cb)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.