marshel

MAL-2026-325

PyPItyposquat1/18/2026
Description

Malicious code in marshel (PyPI)

Indicators of Compromise
SHA256 Hashes (3)
d1b25f97e5a657b33bb26f2ccdfbdb55e459274a4cb3e19e38d3f04ba6ea3583
5285ec870321cf1141f3bb78f8de64f156dd855f9913705831ebbb6b58a9fdf6
d642937b849dbb7ee3cc67b993e2a519de7e420e13ac35a917373387e03dccbe
Domains (1)
server-unlock-hack.onrender.com
References (2)
https://bad-packages.kam193.eu/pypi/package/marshelOSVhttps://www.getsafety.com/blog-posts/telegrem-bot-malwareOSV
Details
EcosystemPyPI
Attack Typetyposquat
Published1/18/2026
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001