MAL-2025-6431

    Dashboard / Malicious Package / MAL-2025-6431

    MAL-2025-6431

    Published: 29 May 2025Last Modified: 19 Mar 2026

    Summary: Malicious code in alpha-booster (PyPI)

    Details: Source: kam193 (8fe7614b282cfa81278bc61bde1998e286fe7554c1d37b4c3185718c6e54f6af) Code downloads and runs the remote executable. While the current link seems not to work, the previous versions had an embedded infostealer instead. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-05-discord-booster Reasons (based on the campaign): - infostealer - Downloads and executes a remote executable.

    References: https://bad-packages.kam193.eu/pypi/package/alpha-booster

    Affected packages

    Package

    Name: alpha-booster

    Purl: pkg:pypi/alpha-booster

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0
    MAL-2025-6431 | CVE-DB