—
MAL-2026-10864
Malicious code in kimichat (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (1d4795d0466af3e087dba2ac688463000092f9f4fda9040a4653956a3dc2583a) In this campaign, packages use names similar to popular services (e.g. Kimi AI) to deploy cryptominer.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-07-kimichat
Reasons (based on the campaign):
- cryptominer
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / kimichat
No fixed version published yet for kimichat (pip). Pin to a known-safe version or switch to an alternative.