MAL-2025-191914

    Dashboard / Malicious Package / MAL-2025-191914

    MAL-2025-191914

    Published: 28 Jun 2025Last Modified: 12 Dec 2025

    Summary: Malicious code in typing-extensions-plus (PyPI)

    Details: Source: kam193 (78c15498f688e49c1d6a8b369eae95e0e77016cd05d74f89a72fa9e845c71da5) Importing the module starts code responsible of exfiltrating crypto tokens and API keys. Package imitates typing-extensions Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-06-typing-extensions-plus Reasons (based on the campaign): - crypto-related - exfiltration-credentials - impersonation

    References: https://bad-packages.kam193.eu/pypi/package/typing-extensions-plus

    Affected packages

    Package

    Name: typing-extensions-plus

    Purl: pkg:pypi/typing-extensions-plus

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2025-191914 | CVE-DB