MAL-2026-5679
Malicious code in pylogxo (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (7ccb3e3a1ccde821415d6be9c25d123cc1ebedea4ca6dd40d77fc24e01cd0aaa) During import, the package downloads and executes remote code being an infostealer.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-06-pylogxo
Reasons (based on the campaign):
- Downloads and executes a remote malicious script.
- infostealer
- The package contains code to detect if it is running in a sandbox environment.
- exfiltration-credentials
- exfiltration-browser-data
- files-exfiltration
Are you affected?
Enter the version of the package you're using.
Affected packages
No fixed version published yet for pylogxo (pip). Pin to a known-safe version or switch to an alternative.