MAL-2026-5093

    Dashboard / Malicious Package / MAL-2026-5093

    MAL-2026-5093

    Published: 31 May 2026Last Modified: 31 May 2026

    Summary: Malicious code in h4xupdate (PyPI)

    Details: Source: kam193 (0de4da975d7b071824607be751a9ea0fb13e409eaef58d1cc0628263d5dea700) Package contains a remote control tool taking orders from a hardcoded Telegram bot. The authorship impersonate legitimate company. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-05-h4xupdate Reasons (based on the campaign): - rat - The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine. - files-exfiltration - impersonation

    References: https://bad-packages.kam193.eu/pypi/package/h4xupdate

    Affected packages

    Package

    Name: h4xupdate

    Purl: pkg:pypi/h4xupdate

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.0.1
    MAL-2026-5093 | CVE-DB