MAL-2025-2601

    Dashboard / Malicious Package / MAL-2025-2601

    MAL-2025-2601

    Published: 18 Mar 2025Last Modified: 18 Mar 2025

    Summary: Malicious code in bsb-family-pack2 (PyPI)

    Details: Source: oracle-using-macaron (3c8e5ce70508c90e2093517061f924980b3f870682878633d12afdf9903b6ecf) This package is designed to exfiltrate sensitive user data, including SMS messages, contacts, call logs, and files, to a remote server via Telegram. Such behavior suggests it could be used for surveillance or other malicious activities.

    References:

    Affected packages

    Package

    Name: bsb-family-pack2

    Purl: pkg:pypi/bsb-family-pack2

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0