—
MAL-2026-10866
Malicious code in nemopush (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (b1717e80fb3423ed246cbcaacb39cfa13526d2f2520a8de1229cd3388e391059) In this campaign, packages use names similar to popular services (e.g. Kimi AI) to deploy cryptominer.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-07-kimichat
Reasons (based on the campaign):
- cryptominer
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / nemopush
No fixed version published yet for nemopush (pip). Pin to a known-safe version or switch to an alternative.