—
MAL-2026-16122
Malicious code in pylever (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (068694f49511d5a0c8678ca2196385c50cc68d1c526d5b151a6f2cdcfcae9b64) The package contains a stealer exfiltrating Discord tokens to a hardcoded location.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-09-pylever
Reasons (based on the campaign):
- infostealer
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/pylever
No fixed version published yet for pylever (pip). Pin to a known-safe version or switch to an alternative.