Findings

MAL-2026-17887

Malicious code in proxy-rubikis (PyPI)

Published Oct 15, 2026 · updated Oct 15, 2026

--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (0326ad29540efd267d15181087b384b25da962e7bcd6ac40c39641699e212e50) The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-proxyrubika Reasons (based on the campaign): - files-exfiltration - target:android

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 15, 2026 · OSV.dev

    Detected

    --- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (0326ad29540efd267d15181087b384b25da962e7bcd6ac40c39641699e212e50) The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-proxyrubika Reasons (based on the campaign): - files-exfiltration - target:android

  2. Oct 15, 2026 · OSV.dev

    Updated

    --- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (0326ad29540efd267d15181087b384b25da962e7bcd6ac40c39641699e212e50) The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-proxyrubika Reasons (based on the campaign): - files-exfiltration - target:android

Affected

  • PyPI proxy-rubikis0.1.0

Sources

  • OSV.devPackage advisoryMAL-2026-17887

    Malicious code in proxy-rubikis (PyPI)

    osv.dev

References