mrmustard

MAL-2026-11049

PyPImalware7/24/2026
Description

Malicious code in mrmustard (PyPI)

Indicators of Compromise
SHA256 Hashes (1)
c98fd85267fd094cfb6b9a6e6e4d63bb5935298ad328ad5e4dedf3972e43d8f9
Domains (1)
metrics.femboy.energy
References (3)
https://github.com/XanaduAI/MrMustard/issues/656OSVhttps://github.com/XanaduAI/MrMustard/commit/80aba721b2a902bc6efb04e3c77c3bdd28d1e716OSVhttps://bad-packages.kam193.eu/pypi/campaign/2026-07-compr-hw-probeOSV
Details
EcosystemPyPI
Attack Typemalware
Published7/24/2026
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001