roboat-additions

MAL-2026-2280

PyPImalware3/28/2026
Description

Malicious code in roboat-additions (PyPI)

Indicators of Compromise
SHA256 Hashes (10)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 (1)
jolly-violet-def9.staraledreamer.workers.dev
Details
EcosystemPyPI
Attack Typemalware
Published3/28/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001