do-not-install-this-package-001

MAL-2025-192387

PyPItyposquat12/9/2025
Description

Malicious code in do-not-install-this-package-001 (PyPI)

Indicators of Compromise
SHA256 Hashes (7)
399ba544f533d013d73525a2e22fbc83c2f4f00ce44c27c15cff9ca8ccaf11de
7249ad6aa9405dfaf9e7fad98da1c2cbc437ce5a803922315fc6d800e6e4283c
2f9552a5ebf4c3459256111bab837a49dd05b9d3cf2dae2e7c02390a175ce1a6
27c17335ba5378258efc5d22274e8104e45a493eec51d60d0adbeb9c4f627714
9c0fe3a3376e6379d81ea6d55c068db9f72a785fc8123f35704e35efe5200b97
020d2cade2c23bce047da08607f512130fc03ec69a70a79ec046a1d6a8f91d86
ba206991cd762792a8755427477cd461efab8e1427e1cfabb02ddbdca15f7140
References (1)
https://bad-packages.kam193.eu/pypi/package/do-not-install-this-package-001OSV
Details
EcosystemPyPI
Attack Typetyposquat
Published12/9/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001