donutpromotion

MAL-2026-17196

PyPImalware9/27/2026

Description

Malicious code in donutpromotion (PyPI)

Indicators of Compromise

SHA256 Hashes (1)

26201e7959d7a736440fa6fb22ba7b9911c269b08460374d0a2db307ba6b0273

Domains (2)

thisisafalsepositive.stsltnnt.ru

References (3)

https://www.virustotal.com/gui/file/d03c42c275f0dbc617428441508c49ae1adcbbc95af4eeb094bca4e4f8943f3e/detectionossf/malicious-packages https://polygonscan.com/address/0x9c0a507300fd902787bb193d80fca5ce6e1bff9aossf/malicious-packages https://bad-packages.kam193.eu/pypi/package/donutpromotionossf/malicious-packages

Details

EcosystemPyPI

Attack Typemalware

Published9/27/2026

Affected Versions

0.1.0

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001