—
MAL-2026-11197
Malicious code in ai-perf-toolkit (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba) During import, the package starts cryptomining for a hardcoded wallet. The mining software has to already be installed.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-07-ai-perf-toolkit
Reasons (based on the campaign):
- cryptominer
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / ai-perf-toolkit
No fixed version published yet for ai-perf-toolkit (pip). Pin to a known-safe version or switch to an alternative.