MAL-2025-5837

    Dashboard / Malicious Package / MAL-2025-5837

    MAL-2025-5837

    Published: 12 Jul 2025Last Modified: 12 Dec 2025

    Summary: Malicious code in test-package-avinav (PyPI)

    Details: Source: kam193 (db665678ac908b6f9aa76ef069759ebd70b62c901a6f840b765ba7cac299c423) During installation, a heavily obfuscated code is executed. Exact behaviour unclear Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-test-package-avinav Reasons (based on the campaign): - obfuscation Source: ossf-package-analysis (a701dbfb1fb2a151d070e86ea07710e08c317743ac5b90d82b3cdc2231cd3093) The OpenSSF Package Analysis project identified 'test-package-avinav' @ 0.0.1 (pypi) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

    References: https://bad-packages.kam193.eu/pypi/package/test-package-avinav

    Affected packages

    Package

    Name: test-package-avinav

    Purl: pkg:pypi/test-package-avinav

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.0.1