{"id":"MAL-2026-10985","summary":"Malicious code in animated-octo-spoon (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (52fb3a0200c7b61bf5fc682f4d07d707c8793eff868ee0d2877de539bddd62b2)\nIn this campaign, packages use names similar to popular services (e.g. Kimi AI) to deploy cryptominer.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-07-kimichat\n\n\nReasons (based on the campaign):\n\n\n - cryptominer\n","modified":"2026-07-23T07:53:00.343008371Z","published":"2026-07-21T15:24:17Z","database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-07-kimichat/animated-octo-spoon","import_time":"2026-07-21T16:33:26.317963777Z","modified_time":"2026-07-21T15:24:17.282057Z","sha256":"52fb3a0200c7b61bf5fc682f4d07d707c8793eff868ee0d2877de539bddd62b2","source":"kam193","versions":["0.1.0","0.1.1"]}]},"references":[{"type":"WEB","url":"https://github.com/newbroughblueogwin/automatic-octo-invention"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/animated-octo-spoon"}],"affected":[{"package":{"name":"animated-octo-spoon","ecosystem":"PyPI","purl":"pkg:pypi/animated-octo-spoon"},"versions":["0.1.0","0.1.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/animated-octo-spoon/MAL-2026-10985.json"}}],"schema_version":"1.7.5","credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}