auto-backup-wins
MAL-2026-925
PyPImalware1/5/2026
Description
Malicious code in auto-backup-wins (PyPI)
Indicators of Compromise
SHA256 Hashes (4)
aff4d155db07819f743969dff5f9aab5cc9344d09cf71748664631c6a8972188
6df416ffa870b78e8897c2f5ecc67c4d5655015832ad7ac965b9aeedcf857bac
c75087101c3ef272d35e87c1e17c5455e788fec5b5aabb6a61c42362a180b30e
56d9698affa1def9bbe5fa9a53e90733bd0a6f0ebef99c225755770585ccef12
References (10)
https://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/install.sh#L116OSVhttps://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/.configs/config.ini#L22OSVhttps://github.com/oxmoei/polyseer/blob/ee72cef85257d3293be791cb091bf3d1767cac1d/install.sh#L135OSVhttps://github.com/youssefmgerges/polyseer/blob/b4dad9a57954a77b2e7eaff17f71fd51efdb179b/install.sh#L147OSVhttps://github.com/youssefmgerges/Polymarket-trading-bot-15min-BTC/blob/829c2f0665be408411a152aa646b17f5cd857daf/install.sh#L179OSVhttps://github.com/oxmoei/cursor-free-vip/blob/1c2226ea4f6271a1f0cf05c86c1a8d3966fb6e1a/install.sh#L176OSVhttps://github.com/oxmoei/Polymarket-trading-bot-15min-BTC/blob/6faaf0959a2ddbd6b307f722cd4b25d8a128cd37/install.sh#L179OSVhttps://github.com/youssefmgerges/cursor-free-vip/blob/e32795819da22a35ccc20b9e5a63d0f056ea8f04/install.sh#L176OSVhttps://bad-packages.kam193.eu/pypi/package/auto-backup-winsOSVhttps://github.com/kam193/package-campaigns/blob/97de615c16496639c059ee2f62c5dd7d88ac06eb/pypi/packages/malicious/osv/auto-backup-wsl.json#L3OSV
Details
EcosystemPyPI
Attack Typemalware
Published1/5/2026
Quick Actions