MAL-2026-18354unknown
Malicious code in trajmetrics (PyPI)
The advisory, in context
-= Per source details. Do not edit below this line.=-
Source: kam193 (3370d77977a536de8b2ea99267086960e8be3aea34a1efac6d975bb2bad98271)
When starting as a module, the package scans the whole system and exfiltrates selected files by type. If following the README instruction, it starts a background job constantly monitoring the system and exfiltrating files as soon as they change.
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-10-trajmetrics
Reasons (based on the campaign):
-
native-extension
-
files-exfiltration
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
trajmetrics PyPI
1 explicitly affected versions
0.5.3
View affected-version evidence
{
"ranges": [],
"versions": [
"0.5.3"
]
}