MAL-2025-191846

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pythondm32/MAL-2025-191846.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-191846
Published
2025-06-21T09:33:32Z
Modified
2025-12-12T20:40:09.943634Z
Summary
Malicious code in pythondm32 (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (2350dbde660e08d6f97a447886432a41c60802af7e1396dabff53af3ec9091f6)

The embedded dm3.1233.dll has a very high recognition as malware

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2025-06-pythondm32

Reasons (based on the campaign):

  • malware
Database specific 
{
    "malicious-packages-origins": [
        {
            "sha256": "bf885ef7b93ea634c88824174459583cdba9e3a3cdf0399ff4dc35fdab47b72a",
            "ranges": [
                {
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ],
                    "type": "ECOSYSTEM"
                }
            ],
            "modified_time": "2025-06-21T09:33:32Z",
            "source": "kam193",
            "id": "pypi/2025-06-pythondm32/pythondm32",
            "import_time": "2025-12-02T22:30:55.496840271Z"
        },
        {
            "sha256": "2350dbde660e08d6f97a447886432a41c60802af7e1396dabff53af3ec9091f6",
            "ranges": [
                {
                    "events": [
                        {
                            "introduced": "0"
                        }
                    ],
                    "type": "ECOSYSTEM"
                }
            ],
            "modified_time": "2025-06-21T09:33:32Z",
            "source": "kam193",
            "id": "pypi/2025-06-pythondm32/pythondm32",
            "import_time": "2025-12-02T23:07:18.521754716Z"
        },
        {
            "versions": [
                "1.1.0"
            ],
            "sha256": "3207664f7e25815a2661e7d0e62269d01fe823637599239dbc1bf335d3343646",
            "modified_time": "2025-06-21T09:33:32Z",
            "source": "kam193",
            "id": "pypi/2025-06-pythondm32/pythondm32",
            "import_time": "2025-12-10T21:38:57.740139032Z"
        }
    ]
}
References
Credits

Affected packages

PyPI / pythondm32

Package

Name
pythondm32
View open source insights on deps.dev
Purl
pkg:pypi/pythondm32

Affected ranges

Affected versions

1.*
1.1.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/pythondm32/MAL-2025-191846.json"