polyutil
MAL-2026-928
PyPItyposquat2/17/2026
Description
Malicious code in polyutil (PyPI)
Indicators of Compromise
SHA256 Hashes (2)
31a0fc68eee0841a78740fd3e3748171612b871b58bf9f3e52b4fa35bed64774
ced0763b255a5c499d7346f2b2567b34069021fc7be38bcb455ebdaca93aab72
Domains (2)
doc-sendapplication.comupdatedappython.com
IP Addresses (1)
45.150.34.209
References (6)
https://tria.ge/260212-z9ndmabs3bOSVhttps://www.virustotal.com/gui/file/703439f496bded646bb01b62d2cec96f713346a5e38249cdcab4b4840ea56aa9/detectionOSVhttps://app.any.run/tasks/6c406e3e-5a9b-4019-8427-8be8b30e284aOSVhttps://tria.ge/260213-22j3cah18b/behavioral1OSVhttps://bad-packages.kam193.eu/pypi/package/polyutilOSVhttps://www.getsafety.com/blog-posts/magicwolfOSV
Details
EcosystemPyPI
Attack Typetyposquat
Published2/17/2026
Quick Actions