MAL-2026-1091

    Dashboard / Malicious Package / MAL-2026-1091

    MAL-2026-1091

    Published: 28 Feb 2026Last Modified: 19 Mar 2026

    Summary: Malicious code in myproject-bola (PyPI)

    Details: Source: kam193 (f85bf2df7a8a311b7140ca4086746ecf3c26b219843b96c1f9f8c22f505e7edc) Starting the module initiates an infostealer with a Telegram bot and RAT-like functionality and hardcoded credentials. The code automatically adds itself to autostart, collects some credentials, and also awaits further commands. The code is capable of exfiltrating browser data, files, taking screenshots, recording audio and modifying some system configurations. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-02-isb Reasons (based on the campaign): - infostealer - exfiltration-browser-data - exfiltration-credentials - peristence-autorun - rat - spyware-like - files-exfiltration - iritating-computer-activity

    References: https://bad-packages.kam193.eu/pypi/package/myproject-bola

    Affected packages

    Package

    Name: myproject-bola

    Purl: pkg:pypi/myproject-bola

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    MAL-2026-1091 | CVE-DB