—
MAL-2026-937
Malicious code in telebot-infee (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (660cdc2470d38cf51f0a232119dd9765cba56eb66412f12d3c09b40dd7bd8530) The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2025-10-speedd-testing-bot
Reasons (based on the campaign):
- typosquatting
- Downloads and executes a remote malicious script.
- rat
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / telebot-infee
No fixed version published yet for telebot-infee (pip). Pin to a known-safe version or switch to an alternative.