MAL-2025-192363

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/telco/MAL-2025-192363.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192363
Published
2025-12-06T16:24:38Z
Modified
2025-12-09T08:53:20.054306Z
Summary
Malicious code in telco (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (55c8199592663c3f388cba22988800084bbc3a5696279eb22c53e837c1d8ac40)

Running the module starts a reverse shell

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2025-12-evil-rce

Reasons (based on the campaign):

  • The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.
Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "1.0.1"
            ],
            "id": "pypi/2025-12-evil-rce/telco",
            "import_time": "2025-12-06T17:36:04.135980629Z",
            "sha256": "55c8199592663c3f388cba22988800084bbc3a5696279eb22c53e837c1d8ac40",
            "modified_time": "2025-12-06T16:24:38.836736Z",
            "source": "kam193"
        },
        {
            "versions": [
                "1.0.1",
                "1.0.2"
            ],
            "id": "pypi/2025-12-evil-rce/telco",
            "import_time": "2025-12-09T08:44:45.803212183Z",
            "sha256": "ec1b93ebd2da11950753d0cbc248506422d1f4df1bffb5054eef00511aed9e57",
            "modified_time": "2025-12-09T07:43:47.538973Z",
            "source": "kam193"
        }
    ]
}
References
Credits

Affected packages

PyPI / telco

Package

Name
telco
View open source insights on deps.dev
Purl
pkg:pypi/telco

Affected ranges

Affected versions

1.*

1.0.1
1.0.2