MAL-2025-191917

    Dashboard / Malicious Package / MAL-2025-191917

    MAL-2025-191917

    Published: 8 Feb 2025Last Modified: 12 Dec 2025

    Summary: Malicious code in updateuuid4 (PyPI)

    Details: Source: kam193 (2c45f904631a26aae94cafeeac5ea0f7efe0fc5d4f46dea48da17dcb766111d5) The package, with an innocent looking name, has as the only functionality reporting to a Telegram channel given username and password. The functionality is in the "HeadersUpdate" class, that also looks like attempting to look innocent. The code does nothing more than reporting given credentials through a bot using the name "hitlercute_bot". Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-02-updateuuid4 Reasons (based on the campaign): - infostealer

    References: https://bad-packages.kam193.eu/pypi/package/updateuuid4

    Affected packages

    Package

    Name: updateuuid4

    Purl: pkg:pypi/updateuuid4

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.1.2
    MAL-2025-191917 | CVE-DB