VDB
KO

MAL-2026-10865

Malicious code in kimitalk (PyPI)

Details

--- _-= Per source details. Do not edit below this line.=-_

## Source: kam193 (f48f2e540e85a647f55ad2b8758c8cca9d9a6105a72058870e59d4a410c83c9f) In this campaign, packages use names similar to popular services (e.g. Kimi AI) to deploy cryptominer.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-07-kimichat

Reasons (based on the campaign):

- cryptominer

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / kimitalk

No fixed version published yet for kimitalk (pip). Pin to a known-safe version or switch to an alternative.

References