MAL-2025-41688

    Dashboard / Malicious Package / MAL-2025-41688

    MAL-2025-41688

    Published: 14 Aug 2025Last Modified: 19 Mar 2026

    Summary: Malicious code in iamenumerate (PyPI)

    Details: Source: kam193 (d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554) This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed (no other changes). It is anyway dangerous as most probably will be updated with the malicious code later Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-aws-enumerate Reasons (based on the campaign): - exfiltration-generic - action-hidden-in-lib-usage - exfiltration-credentials

    References: https://bad-packages.kam193.eu/pypi/package/iamenumerate

    Affected packages

    Package

    Name: iamenumerate

    Purl: pkg:pypi/iamenumerate

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    1.0.1
    MAL-2025-41688 | CVE-DB