donutautosellsrc

MAL-2026-17192

PyPImalware9/27/2026

Description

Malicious code in donutautosellsrc (PyPI)

Indicators of Compromise

SHA256 Hashes (1)

2ac1203ac68b4bb062c4dd38f59fd8bd13fef695c5b1c8059160c6a5205717b1

Domains (2)

thisisafalsepositive.stsltnnt.ru

References (3)

https://www.virustotal.com/gui/file/d03c42c275f0dbc617428441508c49ae1adcbbc95af4eeb094bca4e4f8943f3e/detectionossf/malicious-packages https://polygonscan.com/address/0x9c0a507300fd902787bb193d80fca5ce6e1bff9aossf/malicious-packages https://bad-packages.kam193.eu/pypi/package/donutautosellsrcossf/malicious-packages

Details

EcosystemPyPI

Attack Typemalware

Published9/27/2026

Affected Versions

0.3.70.3.80.3.9

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001