MAL-2025-191764

    Dashboard / Malicious Package / MAL-2025-191764

    MAL-2025-191764

    Published: 5 Jul 2025Last Modified: 12 Dec 2025

    Summary: Malicious code in imad213tools (PyPI)

    Details: Source: kam193 (2cddffd96538ab03979aa6404e3c946258e49677220c4820f3a8f0972b31cb17) Encrypted code offering massive sending Instagram followers. 1) besides of using some shady services to achieve the goal, it also exfiltrates saved Instagram credentials to a remote server; 2) the project page offers selling an "exploit" for Instagram servers Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-imad213tools Reasons (based on the campaign): - exfiltration-credentials - other - obfuscation

    References: https://bad-packages.kam193.eu/pypi/package/imad213tools

    Affected packages

    Package

    Name: imad213tools

    Purl: pkg:pypi/imad213tools

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2025-191764 | CVE-DB