simple-mali-pkg

MAL-2025-6585

PyPImalware7/4/2025
Description

Malicious code in simple-mali-pkg (PyPI)

Indicators of Compromise
SHA256 Hashes (6)
4960d2daee9d0783b20f5190a62ad7fb80928cf4435629e391b70c4ca6d76efc
495fed0bd11ecd2b387f276a9b2236ff40501bd7601670a9fdcfe8e816415f1a
666dea08a29c207ca63db07646ff8d431dbe7aa59721307dd6367c594e01e4e9
c9629656d765c03a690cd0d32598fac52e66c8f5c82dae9405280ee04e1b0280
42e09931ca46089e564a937e3fefaf4e23492e2e1b8c8efbdb8caef061358d54
d1cdb7da5c9c1a2f04e38e4db3bf8023b5cee4fcdb3c408dc0073ca4de525a74
Domains (3)
chrome-data-receiver.up.railway.appchrome-extract.up.railway.appvell-production.up.railway.app
References (2)
https://www.fortinet.com/blog/threat-research/malicious-packages-across-open-source-registriesOSVhttps://bad-packages.kam193.eu/pypi/package/simple-mali-pkgOSV
Details
EcosystemPyPI
Attack Typemalware
Published7/4/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001