Findings

MAL-2026-17885

Malicious code in proxyrubika (PyPI)

Published Oct 15, 2026 · updated Oct 15, 2026

--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (dd55df978007c1a7548ff7e6a548553cf89bd536afffbc8b0921eb3efe31a342) The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-proxyrubika Reasons (based on the campaign): - files-exfiltration - target:android

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 15, 2026 · OSV.dev

    Detected

    --- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (dd55df978007c1a7548ff7e6a548553cf89bd536afffbc8b0921eb3efe31a342) The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-proxyrubika Reasons (based on the campaign): - files-exfiltration - target:android

  2. Oct 15, 2026 · OSV.dev

    Updated

    --- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (dd55df978007c1a7548ff7e6a548553cf89bd536afffbc8b0921eb3efe31a342) The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-proxyrubika Reasons (based on the campaign): - files-exfiltration - target:android

Affected

  • PyPI proxyrubika0.1.0

Sources

  • OSV.devPackage advisoryMAL-2026-17885

    Malicious code in proxyrubika (PyPI)

    osv.dev

References