ipa-user-collector

MAL-2026-6749

PyPImalware7/3/2026

Description

Malicious code in ipa-user-collector (PyPI)

Indicators of Compromise

SHA256 Hashes (2)

f6740d6a9e24bf6219b8f1c07ef005df676552e1b9656d5e0b1c7b6cfc6f3086

9fec164dfe33b84c2cdf2554ecd2dc75c8cd2f0056bccea3f91908aa745f1136

Domains (6)

package-proxy.cf5oobworker.workers.devpackage-proxy.cf8oobworker.workers.devpackage-proxy.cf12oobworker.workers.devpackage-proxy.cf17-ddb.workers.devpackage-proxy.cf25-6eb.workers.devc.lin.dl.wel1.ru

References (2)

https://www.virustotal.com/gui/file/d47a2d1b96df84b10263a99866b865421b334448432d1b447b82c76253bcbe86/detectionOSV https://bad-packages.kam193.eu/pypi/package/ipa-user-collectorOSV

Details

EcosystemPyPI

Attack Typemalware

Published7/3/2026

Quick Actions

All Incidents PyPI Incidents

ipa-user-collector

Ready for Agentic Automated Testing?