auto-backup-linux
MAL-2026-923
PyPImalware1/5/2026
Description
Malicious code in auto-backup-linux (PyPI)
Indicators of Compromise
SHA256 Hashes (4)
716a7be40c73d0ffd69ea3fa8a513926c22f82303c1ae4dd86d80b89bf0a1098
53f041cd5e0f297b28bd4fefd76b2b307d532bbebcaf1e9772d275d3f697c049
e6f1fce241db64e9804a2eee083721b8374a2f27d8f4f2c51ce77a8e7687c61e
65e26c52da8f068ed91738bb38491e4e6c33495fc8a3789e264424dc21407048
References (10)
https://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/install.sh#L116OSVhttps://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/.configs/config.ini#L22OSVhttps://github.com/oxmoei/polyseer/blob/ee72cef85257d3293be791cb091bf3d1767cac1d/install.sh#L135OSVhttps://github.com/youssefmgerges/polyseer/blob/b4dad9a57954a77b2e7eaff17f71fd51efdb179b/install.sh#L147OSVhttps://github.com/youssefmgerges/Polymarket-trading-bot-15min-BTC/blob/829c2f0665be408411a152aa646b17f5cd857daf/install.sh#L179OSVhttps://github.com/oxmoei/cursor-free-vip/blob/1c2226ea4f6271a1f0cf05c86c1a8d3966fb6e1a/install.sh#L176OSVhttps://github.com/oxmoei/Polymarket-trading-bot-15min-BTC/blob/6faaf0959a2ddbd6b307f722cd4b25d8a128cd37/install.sh#L179OSVhttps://github.com/youssefmgerges/cursor-free-vip/blob/e32795819da22a35ccc20b9e5a63d0f056ea8f04/install.sh#L176OSVhttps://bad-packages.kam193.eu/pypi/package/auto-backup-linuxOSVhttps://github.com/kam193/package-campaigns/blob/97de615c16496639c059ee2f62c5dd7d88ac06eb/pypi/packages/malicious/osv/auto-backup-wsl.json#L3OSV
Details
EcosystemPyPI
Attack Typemalware
Published1/5/2026
Quick Actions