chalk-fancy
MAL-2026-3212
PyPIbackdoor5/1/2026
Description
Malicious code in chalk-fancy (PyPI)
Indicators of Compromise
SHA256 Hashes (1)
b86a641eb2b6239d8a88849df88a1a148fa5380e3c8767dc59915edb295ef5b3
Domains (2)
renderkit1.vercel.appctx-graphics.vercel.app
References (4)
https://github.com/0xsebasneuronOSVhttps://socket.dev/supply-chain-attacks/north-korea-s-contagious-interview-campaignOSVhttps://github.com/0xsebasneuron/polymarket-arbitrage-copy-trading-bot-V2/commit/4dae9aea3c35a627a7f38a28946f73af18930a3e#diff-4d7c51b1efe9043e44439a949dfd92e5827321b34082903477fd04876edb7552OSVhttps://bad-packages.kam193.eu/pypi/package/chalk-fancyOSV
Details
EcosystemPyPI
Attack Typebackdoor
Published5/1/2026
Quick Actions