MAL-2026-2834
See a problem?- Import Source
- https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/loadcoremwassistant/MAL-2026-2834.json
- JSON Data
- https://api.osv.dev/v1/vulns/MAL-2026-2834
- Published
- 2026-04-17T07:49:49Z
- Modified
- 2026-04-17T08:48:50.593418Z
- Summary
- Malicious code in loadcoremwassistant (PyPI)
- Details
-
-= Per source details. Do not edit below this line.=-
Source: kam193 (20499474b0d0eb5a02bdd34aba8dbd438993b87506fb7a9bd88a62a729736221)
Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose.
Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
Campaign: GENERIC-standard-pypi-install-pentest
Reasons (based on the campaign):
The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.
The package overrides the install command in setup.py to execute malicious code during installation.
- Database specific
{ "malicious-packages-origins": [ { "sha256": "20499474b0d0eb5a02bdd34aba8dbd438993b87506fb7a9bd88a62a729736221", "id": "pypi/GENERIC-standard-pypi-install-pentest/loadcoremwassistant", "source": "kam193", "modified_time": "2026-04-17T07:49:49.099614Z", "versions": [ "99.99.1", "99.99.2", "99.99.3", "99.99.4" ], "import_time": "2026-04-17T08:40:36.209184975Z" } ] }- References
- Credits
-
-
- Kamil Mańkowski (kam193) - REPORTER
-
Affected packages
PyPI / loadcoremwassistant
Package
- Name
- loadcoremwassistant
- View open source insights on deps.dev
- Purl
- pkg:pypi/loadcoremwassistant