{"id":"MAL-2025-191916","summary":"Malicious code in unicore (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (d0c63e3dde8ac739b216a37381f04cd29e543075af8fb347b1685daf4a84e9d6)\nPackage is just calling home and there is no other purpose\n\n\n---\n\nCategory: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.\n\n\nCampaign: 2025-09-unicore\n\n\nReasons (based on the campaign):\n\n\n - other\n","modified":"2026-04-22T23:04:17.949448Z","published":"2025-09-07T21:01:23Z","database_specific":{"malicious-packages-origins":[{"versions":["2.0.1","2.0.0","2","1.2.0","1.1.0"],"id":"pypi/2025-09-unicore/unicore","import_time":"2025-12-02T22:30:56.48204025Z","modified_time":"2025-09-07T21:01:23.55245Z","sha256":"ca27ad347572f42104429b5ac825cc6b34013e9160cc83df29e03d7278f58d13","source":"kam193"},{"id":"pypi/2025-09-unicore/unicore","import_time":"2025-12-02T23:07:19.662350781Z","modified_time":"2025-09-07T21:01:23.55245Z","sha256":"d0c63e3dde8ac739b216a37381f04cd29e543075af8fb347b1685daf4a84e9d6","source":"kam193","versions":["2.0.1","2.0.0","2","1.2.0","1.1.0"]},{"versions":["1.1.0","1.2.0","2.0.0","2","2.0.1"],"id":"pypi/2025-09-unicore/unicore","import_time":"2025-12-30T22:39:04.363480608Z","modified_time":"2025-09-07T21:01:23.55245Z","sha256":"6961d9038d4217ddc5d24b394cb33095881de5c013594fc778dcf7ed430f651f","source":"kam193"},{"modified_time":"2025-09-07T21:01:23.55245Z","sha256":"1318b378c8527c9b7c94c87fe927e87bf7e2140f4eb9b962bb08b4e1405ab624","source":"kam193","versions":["1.1.0","1.2.0","2","2.0.0","2.0.1"],"id":"pypi/2025-09-unicore/unicore","import_time":"2026-04-22T22:48:22.040010664Z"}],"iocs":{"urls":["https://gauss-security.com/poca.php"]}},"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/unicore"}],"affected":[{"package":{"name":"unicore","ecosystem":"PyPI","purl":"pkg:pypi/unicore"},"versions":["2.0.1","2.0.0","2","1.2.0","1.1.0"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/unicore/MAL-2025-191916.json"}}],"schema_version":"1.7.5","credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}