hidden-powershell-runner-ax7

MAL-2025-192659

PyPImalware12/19/2025
Description

Malicious code in hidden-powershell-runner-ax7 (PyPI)

Indicators of Compromise
SHA256 Hashes (2)
5785c01837ec1727b89125cf1a3fec3ad941c4ff0b1246d8d16fec1dff53223a
b35338995e5b550abd756253b53383880e21fd0896e5a7f1bf7822b0cf051c1b
Domains (1)
3zoz.duckdns.org
References (2)
https://www.virustotal.com/gui/file/cb04d8f744d3df997cf47ce691d6e6e9ad5f6a0d19de70931b5591f2557ab116/summaryOSVhttps://bad-packages.kam193.eu/pypi/package/hidden-powershell-runner-ax7OSV
Details
EcosystemPyPI
Attack Typemalware
Published12/19/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001