MAL-2026-5756
Malicious code in easyaillm (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (8b2e19d96463fddff4bb8d7b73696ea1929c0cd8bb4948204e0913c77da0fbb7) During installation, the obfuscsted code attempts to download and start a malicious executable. The published versions contained issues preventing successful downloading, but it was possible to recover the intended executable during the analysis.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-06-easyaillm
Reasons (based on the campaign):
- Downloads and executes a remote executable.
- obfuscation
- malware
Are you affected?
Enter the version of the package you're using.
Affected packages
No fixed version published yet for easyaillm (pip). Pin to a known-safe version or switch to an alternative.