auto-backup-macos
MAL-2026-924
PyPImalware1/5/2026
Description
Malicious code in auto-backup-macos (PyPI)
Indicators of Compromise
SHA256 Hashes (4)
b610548797a0e551c313da3872c55a160f62ad4f3fb8363535b713053d949397
979c07be3bd7d944c22c152134c9414ee37fc5c6c77b5c6b4da378ffbfc157b5
64b97d3c3597539dc5a2cc2d81491eb2a0350011b3d80ef927546bc30701f924
b4bfab294d54805ec8a0ffc488d2206099847a73f1d34abac9d4efc7eeee8734
References (10)
https://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/install.sh#L116OSVhttps://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/.configs/config.ini#L22OSVhttps://github.com/oxmoei/polyseer/blob/ee72cef85257d3293be791cb091bf3d1767cac1d/install.sh#L135OSVhttps://github.com/youssefmgerges/polyseer/blob/b4dad9a57954a77b2e7eaff17f71fd51efdb179b/install.sh#L147OSVhttps://github.com/youssefmgerges/Polymarket-trading-bot-15min-BTC/blob/829c2f0665be408411a152aa646b17f5cd857daf/install.sh#L179OSVhttps://github.com/oxmoei/cursor-free-vip/blob/1c2226ea4f6271a1f0cf05c86c1a8d3966fb6e1a/install.sh#L176OSVhttps://github.com/oxmoei/Polymarket-trading-bot-15min-BTC/blob/6faaf0959a2ddbd6b307f722cd4b25d8a128cd37/install.sh#L179OSVhttps://github.com/youssefmgerges/cursor-free-vip/blob/e32795819da22a35ccc20b9e5a63d0f056ea8f04/install.sh#L176OSVhttps://bad-packages.kam193.eu/pypi/package/auto-backup-macosOSVhttps://github.com/kam193/package-campaigns/blob/97de615c16496639c059ee2f62c5dd7d88ac06eb/pypi/packages/malicious/osv/auto-backup-wsl.json#L3OSV
Details
EcosystemPyPI
Attack Typemalware
Published1/5/2026
Quick Actions