auclean

MAL-2026-16410

PyPImalware9/22/2026
Description

Malicious code in auclean (PyPI)

Indicators of Compromise
SHA256 Hashes (1)
b337040219fb9c972fb5437f3546e662ba42d292657ad100b875c6224f152e71
Domains (1)
auclean-cdn.alcoholpepsi.workers.dev
References (3)
https://www.virustotal.com/gui/file/2a2212676b699cdd44b480d8ac44a4ea0e9887c8ea43b8a531d4ac7279ac2526/detectionossf/malicious-packageshttps://tria.ge/260922-zncd8sw14q/behavioral1ossf/malicious-packageshttps://bad-packages.kam193.eu/pypi/package/aucleanossf/malicious-packages
Details
EcosystemPyPI
Attack Typemalware
Published9/22/2026
Affected Versions
0.4.20.4.30.4.4
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001