—
MAL-2026-10867
Malicious code in vantrala (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (e598f1a12fbd4aed3a98f1942d98fb5ca47182206f0090ac57d7927010061b37) In this campaign, packages use names similar to popular services (e.g. Kimi AI) to deploy cryptominer.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-07-kimichat
Reasons (based on the campaign):
- cryptominer
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / vantrala
No fixed version published yet for vantrala (pip). Pin to a known-safe version or switch to an alternative.