MAL-2026-613

    Dashboard / Malicious Package / MAL-2026-613

    MAL-2026-613

    Published: 30 Jan 2026Last Modified: 31 Jan 2026

    Summary: Malicious code in fastpi (PyPI)

    Details: Source: kam193 (2928970260fda87aaa57272b8042ae1a9661ad1a1bdeec1e73903e84ce3354cd) Malicious copy of the legitimate FastAPI. The modification loads code encrypted in one of the attached files. The final, highly obfuscated code is most likely similar to the code from 2026-01-pypi-package-explore, with the exact behavior unknown. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-01-fastpi Reasons (based on the campaign): - clones-real-package - obfuscation - typosquatting

    References: https://bad-packages.kam193.eu/pypi/package/fastpi

    Affected packages

    Package

    Name: fastpi

    Purl: pkg:pypi/fastpi

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.128.0
    0.128.1
    0.128.2
    MAL-2026-613 | CVE-DB