MAL-2025-192365

    Dashboard / Malicious Package / MAL-2025-192365

    MAL-2025-192365

    Published: 7 Dec 2025Last Modified: 31 Dec 2025

    Summary: Malicious code in python-tg-bot (PyPI)

    Details: Source: kam193 (5397ab6595b8237172e9a49952d092803e03526e3dda8277c64dc4d26ae45ff2) During importing, a dependency with infostealer is loaded and package attempts to exfiltrate credentials. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-blank-lib Reasons (based on the campaign): - infostealer - infostealer:blankgrabber - clones-real-package - The malicious code is intentionally included in a dependency of the package - exfiltration-credentials

    References: https://bad-packages.kam193.eu/pypi/package/python-tg-bot

    Affected packages

    Package

    Name: python-tg-bot

    Purl: pkg:pypi/python-tg-bot

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    22.5.1
    22.5
    MAL-2025-192365 | CVE-DB