robase-installer
MAL-2026-2563
PyPImalware4/11/2026
Description
Malicious code in robase-installer (PyPI)
Indicators of Compromise
SHA256 Hashes (4)
8a58df2482c50adcad735c5374d27375e3356b241603667fcb8cd4e863fee417
89cf5b739e9dec43727b9d33ffe4b897512b06921c75df19dc69ab2cba25f422
1edd96cface7dcae9f445d94982ffc19a27e557fae7030e77e6e5646dfdd5c98
2ed46f2662451ed9c0a47019e665d0fa9c3c06a38bd0874bae05fd26d473139c
Domains (3)
jolly-violet-def9.staraledreamer.workers.devholy-sun-41ff.staraledreamer.workers.devspring-math-9df3.aledreamsaledreams2.workers.dev
References (9)
https://www.virustotal.com/gui/file/9f14d239ab8f1289bc7aedeb67d3d72b467ee6c11b201890ab14c5c4f7c175d2/detectionOSVhttps://www.virustotal.com/gui/file/48b108261d5de97a42eff81cf1a60a32286f72bf8b5f130959e0daa86b783608OSVhttps://www.virustotal.com/gui/file/ef20289b52ab23ec23c5ff885a2293523ce8456fb00e3d67f1b084c28f7d282a/detectionOSVhttps://github.com/Addi9000/roboat/blob/331166c8ea3bd080f08fe6d571202e3b47017ed7/README.md#L31OSVhttps://github.com/Addi9000/roboat/commit/331166c8ea3bd080f08fe6d571202e3b47017ed7OSVhttps://github.com/Addi9000OSVhttps://github.com/RoCruiseOSVhttps://www.roboat.pro/OSVhttps://bad-packages.kam193.eu/pypi/package/robase-installerOSV
Details
EcosystemPyPI
Attack Typemalware
Published4/11/2026
Quick Actions