MAL-2025-73

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/utf-cleaner/MAL-2025-73.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-73
Published
2025-01-10T13:26:27Z
Modified
2026-03-23T00:47:02.090742Z
Summary
Malicious code in utf-cleaner (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (09b9e5c5deafbf756df5201976fdbdc3c61c10e815234df9aeb32764a3cd9652)

During import, the package silently downloads and executes remote code. This code starts a web server in the separate process and listens for commands to execute from a C2 server, as well as periodically sends a beacon to C2 allowing discovery and finishing execution.

This package is closely related to Github repository https://github.com/xcummins/tg-outline-seller/ from the same author, where it's used as dependency effectively compromising its users.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-03-old-utf-cleaner

Reasons (based on the campaign):

  • Downloads and executes a remote malicious script.

  • The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.

Source: ossf-package-analysis (2f3468ce127ee2c3a221f8b2331c633be1c43772101c4baeca6ab4e47710b9ac)

The OpenSSF Package Analysis project identified 'utf-cleaner' @ 3.4.1 (pypi) as malicious.

It is considered malicious because:

  • The package executes one or more commands associated with malicious behavior.
Database specific 
{
    "iocs": {
        "urls": [
            "https://github.com/xcummins/gits"
        ],
        "ips": [
            "90.156.226.65"
        ]
    },
    "malicious-packages-origins": [
        {
            "import_time": "2025-01-13T00:23:32.363393646Z",
            "sha256": "2f3468ce127ee2c3a221f8b2331c633be1c43772101c4baeca6ab4e47710b9ac",
            "source": "ossf-package-analysis",
            "modified_time": "2025-01-10T20:01:22Z",
            "versions": [
                "3.4.1"
            ]
        },
        {
            "import_time": "2025-01-13T00:23:32.447413546Z",
            "sha256": "6ee317562a7c07ecbbc119802e7f69e0ae70d1876cb9c72a5c94b6316064ba2f",
            "source": "ossf-package-analysis",
            "modified_time": "2025-01-12T15:28:24Z",
            "versions": [
                "3.4.2"
            ]
        },
        {
            "import_time": "2025-01-13T00:23:32.281150675Z",
            "sha256": "a0133dbcab387829b4229c7da1b6cb02390e11faf82ea682a1f1d0d649d2c2d6",
            "source": "ossf-package-analysis",
            "modified_time": "2025-01-10T19:58:16Z",
            "versions": [
                "3.4.0"
            ]
        },
        {
            "import_time": "2025-01-13T00:23:32.194797159Z",
            "sha256": "c87e8af9d44b22afadb4888905252edf4ec91532c1ffcd7fce378268a99ae4bf",
            "source": "ossf-package-analysis",
            "modified_time": "2025-01-10T13:26:27Z",
            "versions": [
                "3.3.7"
            ]
        },
        {
            "id": "pypi/2026-03-old-utf-cleaner/utf-cleaner",
            "import_time": "2026-03-22T23:10:44.29819505Z",
            "sha256": "8382837e2b4420621b1ac738092bf8d584dde848e0f8cd6bbf73b0fbc6f74fcb",
            "source": "kam193",
            "modified_time": "2026-03-22T22:57:59.555318Z",
            "versions": [
                "3.3.7",
                "3.3.8",
                "3.3.9",
                "3.4.0",
                "3.4.1",
                "3.4.2"
            ]
        },
        {
            "id": "pypi/2026-03-old-utf-cleaner/utf-cleaner",
            "import_time": "2026-03-23T00:38:15.901304798Z",
            "sha256": "09b9e5c5deafbf756df5201976fdbdc3c61c10e815234df9aeb32764a3cd9652",
            "source": "kam193",
            "modified_time": "2026-03-22T22:57:59.555318Z",
            "versions": [
                "3.3.7",
                "3.3.8",
                "3.3.9",
                "3.4.0",
                "3.4.1",
                "3.4.2"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / utf-cleaner

Package

Name
utf-cleaner
View open source insights on deps.dev
Purl
pkg:pypi/utf-cleaner

Affected ranges

Affected versions

3.*
3.3.7
3.3.8
3.3.9
3.4.0
3.4.1
3.4.2

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/utf-cleaner/MAL-2025-73.json"