—
MAL-2026-11068
Malicious code in random-ua-generator (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (543206058a0b8e85c8227a0bfdd4752fc61779b24968a0bd5d50ae6b3040387b) During import, the code starts a keylogger and exfiltrates data from cryptowallets.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-07-random-ua-generator
Reasons (based on the campaign):
- keylogger
- exfiltration-crypto
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / random-ua-generator
No fixed version published yet for random-ua-generator (pip). Pin to a known-safe version or switch to an alternative.