MAL-2026-18584

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/protecteda/MAL-2026-18584.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-18584
Published
2026-11-03T22:50:47Z
Modified
2026-11-03T23:15:03Z
Summary
Malicious code in protecteda (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (8fb01cc262b8645b045f6d9b6e0454ef525c928a48f8c0904cb63301f1be9e0f)

When started as a module, package runs an embedded executable identified as an infostealer.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-11-protecteda

Reasons (based on the campaign):

  • infostealer

  • malware

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-11-protecteda/protecteda",
            "import_time": "2026-11-03T23:11:26.663640724Z",
            "modified_time": "2026-11-03T22:50:47.51385Z",
            "sha256": "8fb01cc262b8645b045f6d9b6e0454ef525c928a48f8c0904cb63301f1be9e0f",
            "source": "kam193",
            "versions": [
                "0.1.0"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / protecteda

Package

Name
protecteda
View open source insights on deps.dev
Purl
pkg:pypi/protecteda

Affected ranges

Affected versions

0.*
0.1.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/protecteda/MAL-2026-18584.json"