VDB

MAL-2026-14554

Malicious code in decoris (PyPI)

Details

--- _-= Per source details. Do not edit below this line.=-_

## Source: kam193 (1ce74b34855100b6ba312f767a982fb288a802da613fec375aec92665f4d9973) The package exfiltrates Roblox cookies from the victim machine.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-spaysrbdata

Reasons (based on the campaign):

- infostealer

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / decoris

No fixed version published yet for decoris (pip). Pin to a known-safe version or switch to an alternative.

References