caracas4check

MAL-2026-17198

PyPImalware9/27/2026
Description

Malicious code in caracas4check (PyPI)

Indicators of Compromise
SHA256 Hashes (1)
fe298eb267ef99191242315438fe8b7a619bece89e39d3e607cc34af455c647a
IP Addresses (1)
185.241.208.139
References (2)
https://www.virustotal.com/gui/file/296b5205b6a5c48ab5dcdbf4abf34818991f1202e560137ee480c075135f63ec/detectionossf/malicious-packageshttps://bad-packages.kam193.eu/pypi/package/caracas4checkossf/malicious-packages
Details
EcosystemPyPI
Attack Typemalware
Published9/27/2026
Affected Versions
1.1.11.1.2
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001