xyq-drama-skill

MAL-2026-10681

PyPImalware7/15/2026
Description

Malicious code in xyq-drama-skill (PyPI)

Indicators of Compromise
SHA256 Hashes (1)
283e19b30723479c8d85b742514f7f6c4a4964a8b0e57ebb4239c3285c35188f
Domains (2)
douyin-cloud.tos-cn-beijing.volces.coms62fhr06buoa937godru4.apigateway-cn-beijing.volceapi.com
References (2)
https://www.virustotal.com/gui/file/cb5006f65df07c47a8cd1ec49b76e6f73b8ffca225fd0a9e47a60905cafeaaff/detectionOSVhttps://bad-packages.kam193.eu/pypi/package/xyq-drama-skillOSV
Details
EcosystemPyPI
Attack Typemalware
Published7/15/2026
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001