MAL-2026-17884
Malicious code in getpubip (PyPI)
Published Oct 15, 2026 · updated Oct 15, 2026
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (6a07d6dd387bbd88252ffdda7f8c10daf988f0622250daf20e7ec8ee0f63c6d5) During import, obfuscated code downloads and executes an infostealer. Campaign shares some similarities with the campaign 2026-10-fontcase. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-getpubip Reasons (based on the campaign): - Downloads and executes a remote executable. - infostealer - exfiltration-browser-data - obfuscation
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · OSV.dev
Detected
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (6a07d6dd387bbd88252ffdda7f8c10daf988f0622250daf20e7ec8ee0f63c6d5) During import, obfuscated code downloads and executes an infostealer. Campaign shares some similarities with the campaign 2026-10-fontcase. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-getpubip
Oct 15, 2026 · OSV.dev
Updated
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (6a07d6dd387bbd88252ffdda7f8c10daf988f0622250daf20e7ec8ee0f63c6d5) During import, obfuscated code downloads and executes an infostealer. Campaign shares some similarities with the campaign 2026-10-fontcase. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-getpubip
Affected
- PyPI getpubip0.1.0, 0.1.1, 0.1.2