MAL-2026-2124

    Dashboard / Malicious Package / MAL-2026-2124

    MAL-2026-2124

    Published: 24 Mar 2026Last Modified: 24 Mar 2026

    Summary: Malicious code in mgrcfg (PyPI)

    Details: Source: kam193 (eeb9b6975940ff31a6a0f6361fd93d8d361a3687103c94c011a6fdf510a2fdec) The code exfiltrates content copied to clipboard content to a hardcoded location. The code is obfuscated and has a persistence mechanism. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-03-cfgmgr-syn Reasons (based on the campaign): - clipboard-stealing - obfuscation - exfiltration-generic - persistence

    References: https://bad-packages.kam193.eu/pypi/package/mgrcfg

    Affected packages

    Package

    Name: mgrcfg

    Purl: pkg:pypi/mgrcfg

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.6.7
    1.6.8
    1.6.9