syswatch
MAL-2026-15811
PyPImalware9/1/2026
Description
Malicious code in syswatch (PyPI)
Indicators of Compromise
SHA256 Hashes (2)
863ff540be3399380239a471217fc84175f06c66bedc0fc0f89901fbaae46a38
e01fd8b85a9d6bdfbefb70261f49496f8a6c224d98da6400ef0ca06f18404d27
Domains (2)
env-metadata.up.railway.appivahook.online
References (3)
https://www.virustotal.com/gui/file/d49fa53949d9350ee34c4e1279ee72e6fafc294ae338825f66c33c7f188b878c/detailsossf/malicious-packageshttps://www.virustotal.com/gui/file-analysis/MGQ3ZGViMWFhYzU0YjY3ODllZWI1ZGJkMDY4Nzk3NGM6MTc4NzUxODgyOQ==ossf/malicious-packageshttps://bad-packages.kam193.eu/pypi/package/syswatchossf/malicious-packages
Details
EcosystemPyPI
Attack Typemalware
Published9/1/2026
Affected Versions
1.0.0
Quick Actions