Malicious code in loadferry (PyPI)

This threat involves the loadferry package (version 0.1.0) on PyPI, identified as part of a campaign distributing loader packages designed to execute code fetched from remote URLs. The packages do not embed malicious payloads directly but facilitate the execution of remote malicious scripts, indicating a coordinated effort to provide multiple deceptive methods for loading malicious code. The campaign is categorized as malicious with intent similar to infostealers.

The package enables the execution of remote malicious scripts, which can lead to unauthorized code execution on systems where the package is installed. This can result in compromise of system integrity, data theft, or further malware deployment depending on the remote payload.

No official patch or remediation is indicated. Users should avoid installing or using the loadferry package version 0.1.0. Review and remove the package if already installed. Monitor for updates from PyPI or the package maintainer for any official advisories or removals.