MAL-2026-18336unknown
Malicious code in h13t0ry-hello-demo (PyPI)
The advisory, in context
-= Per source details. Do not edit below this line.=-
Source: kam193 (e27409f6c0ba5c7e7ba22f21c8b4806686ae8b64f4d7daf2dd9a7e6182bef5ab)
During import package starts a reverse shell
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-10-h13t0ry-hello-demo
Reasons (based on the campaign):
- The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
h13t0ry-hello-demo PyPI
1 explicitly affected versions
0.1.0
View affected-version evidence
{
"ranges": [],
"versions": [
"0.1.0"
]
}