MAL-2025-191739

    Dashboard / Malicious Package / MAL-2025-191739

    MAL-2025-191739

    Published: 6 Sept 2025Last Modified: 31 Dec 2025

    Summary: Malicious code in giteegit (PyPI)

    Details: Source: kam193 (4a26c5d911f4394086eca9dfca0dfb8b05cc0675bac36dfdbec08e30f6d1abed) Package exfiltrates source code files to a telegram channel, while the description promises saving them to a git service Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-giteegit Reasons (based on the campaign): - files-exfiltration - A Telegram webhook is used to send collected data.

    References: https://bad-packages.kam193.eu/pypi/package/giteegit

    Affected packages

    Package

    Name: giteegit

    Purl: pkg:pypi/giteegit

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.5
    1.0.4
    1.0.1
    1.0.0
    MAL-2025-191739 | CVE-DB