MAL-2026-925

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/auto-backup-wins/MAL-2026-925.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-925
Published
2026-01-05T23:49:57Z
Modified
2026-03-19T12:50:51.155188Z
Summary
Malicious code in auto-backup-wins (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (c75087101c3ef272d35e87c1e17c5455e788fec5b5aabb6a61c42362a180b30e)

Package performs a "backup" of files to a remote location. This functionality is clearly described, but the user has no control over the remote location where the collected files are sent, as well as no access to the "backed up" data. They are uploaded to a hardcoded Gofile account and as the downloading links are not saved anywhere, only the package author has access to them. In newer versions, packages explicitly target files with passwords, mnemonics, keys and crypto tokens. Also the command history and content of the clipboard are exfiltrated.

Furthermore, packages are closely related to and used in multiple Github repositories about cryptocurrencies, and other attractive toolsets, like free AI. When a user sets up one of these repositories, the auto-backup* packages are automatically installed. They are set - through a covered steps - to run as a scheduled task or periodic service, and exfiltrate sensitive data.

As an example, https://github.com/oxmoei/BatchCall-dapp :

  1. Installation: https://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/install.sh#L108
  2. next, a remote script is executed: https://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/install.sh#L124C10-L124C103
  3. which then extracts base64-encoded scripts in the repository itself https://github.com/oxmoei/BatchCall-dapp/blob/20dc21c96226481b3351ee477ad64e615a34b0c5/.configs/config.ini#L22 and configures scheduled tasks/services/cronjobs/bashrc entries.

Scripts encoded in the repository call the "autobackup" command provided by auto-backup* Python packages. Effectively, the user's computer is infected with an infostealer.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-01-auto-backup

Reasons (based on the campaign):

  • files-exfiltration

  • infostealer

  • exfiltration-credentials

  • crypto-related

  • persistence

Database specific 
{
    "iocs": {
        "urls": [
            "https://gist.githubusercontent.com/wongstarx/b1316f6ef4f6b0364c1a50b94bd61207/raw/install.sh",
            "https://github.com/oxmoei/BatchCall-dapp/",
            "https://github.com/oxmoei/polyseer/",
            "https://github.com/oxmoei/cursor-free-vip/",
            "https://github.com/oxmoei/Polymarket-trading-bot-15min-BTC/",
            "https://github.com/youssefmgerges/polyseer/",
            "https://github.com/youssefmgerges/Polymarket-trading-bot-15min-BTC",
            "https://github.com/youssefmgerges/cursor-free-vip/"
        ]
    },
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-01-auto-backup/auto-backup-wins",
            "import_time": "2026-02-16T23:11:10.665944333Z",
            "sha256": "aff4d155db07819f743969dff5f9aab5cc9344d09cf71748664631c6a8972188",
            "source": "kam193",
            "modified_time": "2026-01-28T21:23:02.675256Z",
            "versions": [
                "1.0.0",
                "1.0.2",
                "1.0.3",
                "1.0.4",
                "1.0.5"
            ]
        },
        {
            "id": "pypi/2026-01-auto-backup/auto-backup-wins",
            "import_time": "2026-02-16T23:43:37.865385251Z",
            "sha256": "6df416ffa870b78e8897c2f5ecc67c4d5655015832ad7ac965b9aeedcf857bac",
            "source": "kam193",
            "modified_time": "2026-01-28T21:23:02.675256Z",
            "versions": [
                "1.0.0",
                "1.0.2",
                "1.0.3",
                "1.0.4",
                "1.0.5"
            ]
        },
        {
            "id": "pypi/2026-01-auto-backup/auto-backup-wins",
            "import_time": "2026-02-17T00:35:10.193764363Z",
            "sha256": "c75087101c3ef272d35e87c1e17c5455e788fec5b5aabb6a61c42362a180b30e",
            "source": "kam193",
            "modified_time": "2026-01-28T21:23:02.675256Z",
            "versions": [
                "1.0.0",
                "1.0.2",
                "1.0.3",
                "1.0.4",
                "1.0.5"
            ]
        },
        {
            "id": "RLMA-2026-00123",
            "import_time": "2026-03-19T12:18:15.819563834Z",
            "sha256": "56d9698affa1def9bbe5fa9a53e90733bd0a6f0ebef99c225755770585ccef12",
            "source": "reversing-labs",
            "modified_time": "2026-03-18T12:11:39Z",
            "versions": [
                "1.0.0",
                "1.0.2",
                "1.0.3",
                "1.0.4",
                "1.0.5"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / auto-backup-wins

Package

Name
auto-backup-wins
View open source insights on deps.dev
Purl
pkg:pypi/auto-backup-wins

Affected ranges

Affected versions

1.*
1.0.0
1.0.2
1.0.3
1.0.4
1.0.5

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/auto-backup-wins/MAL-2026-925.json"