MAL-2025-6538

    Dashboard / Malicious Package / MAL-2025-6538

    MAL-2025-6538

    Published: 16 Jul 2025Last Modified: 19 Mar 2026

    Summary: Malicious code in logghelper (PyPI)

    Details: Source: kam193 (2a5f0848002e1727d885bdf20c39e4949fd9609a4df5164a8c42ccc870aa6736) Code attempts to download and run malware, as well as keeps ability to execute files sent via Telegram C2 channel Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-logghelper Reasons (based on the campaign): - malware - infostealer - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

    References: https://bad-packages.kam193.eu/pypi/package/logghelper

    Affected packages

    Package

    Name: logghelper

    Purl: pkg:pypi/logghelper

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2025-6538 | CVE-DB