MAL-2026-1437

    Dashboard / Malicious Package / MAL-2026-1437

    MAL-2026-1437

    Published: 15 Mar 2026Last Modified: 15 Mar 2026

    Summary: Malicious code in flowpeek (PyPI)

    Details: Source: kam193 (e79fec156ab781e041d49cebd6082ee113ef98ce53945dc1a949a3a8e96fa734) During import, the code starts the embedded executable. This executable is an information stealer extracting sensitive data to a Discord channel. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-03-flowfix Reasons (based on the campaign): - obfuscation - infostealer - Downloads and executes a remote executable.

    References: https://app.any.run/tasks/da14db45-34c9-465f-80e5-394d433cd21d, https://app.any.run/tasks/3a6f9054-be6c-4b33-bcf7-d7504e1f4d52, https://bad-packages.kam193.eu/pypi/package/flowpeek

    Affected packages

    Package

    Name: flowpeek

    Purl: pkg:pypi/flowpeek

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.1.1
    MAL-2026-1437 | CVE-DB