MAL-2026-18767

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/supercolor-tui/MAL-2026-18767.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-18767
Published
2026-11-08T11:31:04Z
Modified
2026-11-08T13:15:04Z
Summary
Malicious code in supercolor-tui (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (9798fa32337256d29d4b551193b6aa6817601034ce787bae4d09d7d6636d813b)

Package hides a code downloading and installing an infostealer.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-11-chromacli

Reasons (based on the campaign):

  • Downloads and executes a remote executable.

  • malware

  • infostealer

  • action-hidden-in-lib-usage

Database specific 
{
    "iocs": {
        "urls": [
            "https://cdn.discordapp.com/attachments/1560347732839891076/1562446203021566032/bedwars.exe?ex=6af1172b&is=6aefc5ab&hm=544b5aacd95a3a0cba1db54a7e7adba093e4b68b8e37c9ec7af805e8fc5e960b&",
            "https://store-eu-par-12.gofile.io/download/web/a2a60e90-dea4-4c6c-9a02-be5ede78dc08/solace.exe"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-11-chromacli/supercolor-tui",
            "import_time": "2026-11-08T12:15:16.077421291Z",
            "modified_time": "2026-11-08T11:33:17.456393Z",
            "sha256": "9798fa32337256d29d4b551193b6aa6817601034ce787bae4d09d7d6636d813b",
            "source": "kam193",
            "versions": [
                "0.1.0",
                "0.1.1",
                "0.1.2",
                "0.1.4"
            ]
        },
        {
            "id": "pypi/2026-11-chromacli/supercolor-tui",
            "import_time": "2026-11-08T13:10:25.214672442Z",
            "modified_time": "2026-11-08T11:33:17.456393Z",
            "sha256": "0cdf2ba66c33faabd6be6ed36062fb33456f54ff97a408af930eee82f66ba3a2",
            "source": "kam193",
            "versions": [
                "0.1.0",
                "0.1.1",
                "0.1.2",
                "0.1.4"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / supercolor-tui

Package

Name
supercolor-tui
View open source insights on deps.dev
Purl
pkg:pypi/supercolor-tui

Affected ranges

Affected versions

0.*
0.1.0
0.1.1
0.1.2
0.1.4

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/supercolor-tui/MAL-2026-18767.json"