MAL-2025-2597

    Dashboard / Malicious Package / MAL-2025-2597

    MAL-2025-2597

    Published: 18 Mar 2025Last Modified: 18 Mar 2025

    Summary: Malicious code in blackspammerbd1 (PyPI)

    Details: Source: oracle-using-macaron (b15da26ba7f4131e44fe665d836a9cd11bec3dc1701c7c35005e468a294cd4a0) This package appears to function as a remote access tool, potentially enabling unauthorized access and facilitating data exfiltration. It seems to be part of a broader set of packages published from the same account, which raises concerns about a coordinated effort.

    References:

    Affected packages

    Package

    Name: blackspammerbd1

    Purl: pkg:pypi/blackspammerbd1

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0
    MAL-2025-2597 | CVE-DB