MAL-2024-12292

    Dashboard / Malicious Package / MAL-2024-12292

    MAL-2024-12292

    Published: 6 Oct 2024Last Modified: 31 Dec 2025

    Summary: Malicious code in instaread (PyPI)

    Details: Source: kam193 (792748013463fb0303ff6033b47dcb48c23dc944d5075a8859b6997eafd47a56) The file bc2556d1c1ea2a2d00.js contains an AdWare LNKR, this file is included in read_article.html template and effectively used when the user requests to see the downloaded article in the webbrowser (function "read" from instaread.py). Note: the template may have been copied from the website, so 'maybe' including adware is unintentional. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-10-old-instaread Reasons (based on the campaign): - action-hidden-in-lib-usage - The package is used to advertise a service or product.

    References: https://www.virustotal.com/gui/file/bf7d5b37aa1365e5e79376921304dde4767d1055fc62cc898f5b6b02b5607614/detection, https://bad-packages.kam193.eu/pypi/package/instaread

    Affected packages

    Package

    Name: instaread

    Purl: pkg:pypi/instaread

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.1.3
    0.1.2
    0.1.1
    0.1.0
    MAL-2024-12292 | CVE-DB