MAL-2025-47801

    Dashboard / Malicious Package / MAL-2025-47801

    MAL-2025-47801

    Published: 18 Aug 2025Last Modified: 19 Mar 2026

    Summary: Malicious code in svcmanagement (PyPI)

    Details: Source: kam193 (7b2d49c3d45535d0e8d20f097496169af472ef9fe2612c83823102820542590e) Package attempts to download an executable and install it as a privileged service. The executable seems to be modified remote access tool Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-svcmanager Reasons (based on the campaign): - Downloads and executes a remote executable. - backdoor

    References: https://www.virustotal.com/gui/file/f1bf511ab38a42a2c4c870deb1cd049f56862683471cb103cb845a134e65d82b?nocache=1, https://bad-packages.kam193.eu/pypi/package/svcmanagement

    Affected packages

    Package

    Name: svcmanagement

    Purl: pkg:pypi/svcmanagement

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2025-47801 | CVE-DB