MAL-2026-18768

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/super-color/MAL-2026-18768.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-18768
Published
2026-11-08T12:45:59Z
Modified
2026-11-08T13:15:04Z
Summary
Malicious code in super-color (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (908af2bf828b75158c5bf0aae5a9d422694f21f566a745ff42b82f1f7ed4560d)

Package hides a code downloading and installing an infostealer.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-11-chromacli

Reasons (based on the campaign):

  • infostealer

  • Downloads and executes a remote executable.

  • action-hidden-in-lib-usage

  • malware

Database specific 
{
    "iocs": {
        "urls": [
            "https://cdn.discordapp.com/attachments/1560347732839891076/1562446203021566032/bedwars.exe?ex=6af1172b&is=6aefc5ab&hm=544b5aacd95a3a0cba1db54a7e7adba093e4b68b8e37c9ec7af805e8fc5e960b&",
            "https://store-eu-par-12.gofile.io/download/web/a2a60e90-dea4-4c6c-9a02-be5ede78dc08/solace.exe",
            "https://cdn.discordapp.com/attachments/1442967767853563904/1568964741068759060/AVKiller.exe?ex=6af1bbc8&is=6af06a48&hm=671b2fd3d75241e0ced0dc4db4754d89a4aa1d655a0beb20e1239c1753e0818a&",
            "https://cdn.discordapp.com/attachments/1442967767853563904/1568948904123310080/loader.exe?ex=6af1ad08&is=6af05b88&hm=ebda0a26ebbbc76c3178b0a2eb0c4678c9b2deafc0d68a016a729b1331ed0fc7&"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-11-chromacli/super-color",
            "import_time": "2026-11-08T13:10:25.214084084Z",
            "modified_time": "2026-11-08T12:45:59.568934Z",
            "sha256": "908af2bf828b75158c5bf0aae5a9d422694f21f566a745ff42b82f1f7ed4560d",
            "source": "kam193",
            "versions": [
                "0.1.0",
                "0.1.1",
                "0.1.2",
                "0.1.3"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / super-color

Package

Name
super-color
View open source insights on deps.dev
Purl
pkg:pypi/super-color

Affected ranges

Affected versions

0.*
0.1.0
0.1.1
0.1.2
0.1.3

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/super-color/MAL-2026-18768.json"