MAL-2025-6477

    Dashboard / Malicious Package / MAL-2025-6477

    MAL-2025-6477

    Published: 23 Jun 2025Last Modified: 19 Mar 2026

    Summary: Malicious code in chatgpt4 (PyPI)

    Details: Source: kam193 (6a2f99d20569358bdeab51db7e4f6ea0348c87bbf832a7bc244581a472a05072) Importing the module starts shell code execution Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-06-chatgpt4 Reasons (based on the campaign): - impersonation - shellcode - malware

    References: https://www.virustotal.com/gui/file/8184b83b66956a896cd2de44d7ee4ae0b053157725b0214d835ef19013063d60, https://bad-packages.kam193.eu/pypi/package/chatgpt4

    Affected packages

    Package

    Name: chatgpt4

    Purl: pkg:pypi/chatgpt4

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.1
    MAL-2025-6477 | CVE-DB