roboats-addition
MAL-2026-2281
PyPImalware3/28/2026
Description
Malicious code in roboats-addition (PyPI)
Indicators of Compromise
SHA256 Hashes (10)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 (1)
jolly-violet-def9.staraledreamer.workers.dev
References (9)
https://www.virustotal.com/gui/file/9f14d239ab8f1289bc7aedeb67d3d72b467ee6c11b201890ab14c5c4f7c175d2/detectionOSVhttps://bad-packages.kam193.eu/pypi/package/roboats-additionOSVhttps://www.virustotal.com/gui/file/48b108261d5de97a42eff81cf1a60a32286f72bf8b5f130959e0daa86b783608OSVhttps://www.virustotal.com/gui/file/ef20289b52ab23ec23c5ff885a2293523ce8456fb00e3d67f1b084c28f7d282a/detectionOSVhttps://github.com/Addi9000/roboat/blob/331166c8ea3bd080f08fe6d571202e3b47017ed7/README.md#L31OSVhttps://github.com/Addi9000/roboat/commit/331166c8ea3bd080f08fe6d571202e3b47017ed7OSVhttps://github.com/Addi9000OSVhttps://github.com/RoCruiseOSVhttps://www.roboat.pro/OSV
Details
EcosystemPyPI
Attack Typemalware
Published3/28/2026
Quick Actions