Malicious code in pafer (PyPI)

This threat involves the pafer package versions 0.9.7 and 0.9.8 on PyPI, which contains code to load a pickle file disguised as a configuration. The unpickling process executes embedded malicious code automatically. This code establishes persistence through a PTH file, downloads a secondary payload, and acts as a RAT, allowing remote exfiltration of data and remote code execution. The malicious code is intentionally included as a dependency of the main package webreader, indicating a supply chain compromise or malicious campaign. The campaign is identified as 2026-10-webreader and includes obfuscation and abuse of persistence mechanisms.

Successful exploitation results in remote code execution on the victim's machine, persistence via PTH file abuse, downloading and execution of additional malicious payloads, and remote exfiltration of sensitive data. This compromises system confidentiality, integrity, and availability by enabling attacker control and data theft.

No official patch or remediation is currently documented. Users should avoid installing or using pafer versions 0.9.7 and 0.9.8 and any related packages from the 2026-10-webreader campaign. Monitor for and remove any persistence mechanisms such as suspicious PTH files. Check vendor advisories or PyPI for updates or removal of the malicious packages. Exercise caution with dependencies and verify package integrity before installation.