{"id":"MAL-2026-18354","aliases":[],"title":"Malicious code in trajmetrics (PyPI)","titleSource":"OSV","descriptionSource":"OSV","description":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (3370d77977a536de8b2ea99267086960e8be3aea34a1efac6d975bb2bad98271)\nWhen starting as a module, the package scans the whole system and exfiltrates selected files by type. If following the README instruction, it starts a background job constantly monitoring the system and exfiltrating files as soon as they change.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-trajmetrics\n\n\nReasons (based on the campaign):\n\n\n - native-extension\n\n\n - files-exfiltration\n","severity":"unknown","score":null,"published":"2026-10-27T23:47:08.000Z","modified":"2026-10-28T00:45:08.271Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"PyPI","name":"trajmetrics","sources":[{"name":"OSV · MAL-2026-18354","url":"https://osv.dev/vulnerability/MAL-2026-18354"}],"ranges":[],"versions":["0.5.3"],"fixed":[]}],"sourceAffected":[],"references":["https://github.com/hehesama527/data-analising","https://bad-packages.kam193.eu/pypi/package/trajmetrics"],"sources":[{"name":"OSV","id":"MAL-2026-18354","modified":"2026-10-28T00:45:08.271857367Z","url":"https://osv.dev/vulnerability/MAL-2026-18354"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T10:05:32.626Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}