MAL-2026-1098

    Dashboard / Malicious Package / MAL-2026-1098

    MAL-2026-1098

    Published: 1 Mar 2026Last Modified: 1 Mar 2026

    Summary: Malicious code in noteasonfnsource (PyPI)

    Details: Source: kam193 (fa2242ec1849ffa55a55c85b7781623cdc7147b8568b3beaa5d2b3b956c04e17) Code provides a Discord bot, which - once a generic command is called - performs malicious action against the Discord server: deletes all channels, renames the server, and then starts a loop that creates spamming channels and notifies everyone. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-02-old-noteasonfnsource Reasons (based on the campaign): - abusing-3rd-api - other

    References: https://bad-packages.kam193.eu/pypi/package/noteasonfnsource

    Affected packages

    Package

    Name: noteasonfnsource

    Purl: pkg:pypi/noteasonfnsource

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.3