MAL-2025-192364

    Dashboard / Malicious Package / MAL-2025-192364

    MAL-2025-192364

    Published: 7 Dec 2025Last Modified: 7 Dec 2025

    Summary: Malicious code in blank-lib (PyPI)

    Details: Source: kam193 (96f1bcd77950a6cd42af11d0d4fb4ba3d58349cfde6236027341c044e152bfeb) This is an infostealer, based on Blank Grabber. It's used as dependency in other malicious packages Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-blank-lib Reasons (based on the campaign): - infostealer - infostealer:blankgrabber - clones-real-package - The malicious code is intentionally included in a dependency of the package - exfiltration-credentials

    References: https://bad-packages.kam193.eu/pypi/package/blank-lib

    Affected packages

    Package

    Name: blank-lib

    Purl: pkg:pypi/blank-lib

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.0.8
    0.0.9
    MAL-2025-192364 | CVE-DB