—
MAL-2026-930
Malicious code in telebot-info (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (61aec9d37a402659928293fb6a151f72f9de1194a73a519f7e1595e5ed5b719b) The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2025-10-speedd-testing-bot
Reasons (based on the campaign):
- typosquatting
- Downloads and executes a remote malicious script.
- rat
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / telebot-info
No fixed version published yet for telebot-info (pip). Pin to a known-safe version or switch to an alternative.