—
MAL-2026-16264
Malicious code in aiosendletter (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_
## Source: kam193 (4e81e3b63bbe719f6d0bdd42930bb2f3235b8e41cbacf449743bb7dca67c9f08) Package hides code to exfiltrate files. Most releases target unclear files, but some reveal the goal to exfiltrate sensitive Telegram data.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-09-aiosendletter
Reasons (based on the campaign):
- files-exfiltration
- target:telegram
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/aiosendletter
No fixed version published yet for aiosendletter (pip). Pin to a known-safe version or switch to an alternative.