Malicious code in proxyrobika (PyPI)

The 'proxyrobika' package on PyPI, version 0.1.0, includes code that facilitates automated exfiltration of files. It is associated with a malicious campaign named '2026-10-proxyrubika' targeting Android platforms. The package is identified as malicious software intended to steal information by extracting files from compromised systems.

The presence of automated file exfiltration code in the package can lead to unauthorized data theft from affected Android devices. This compromises confidentiality and may expose sensitive user or system data to attackers. There are no known exploits in the wild reported at this time.

Users and administrators should avoid installing or using the 'proxyrobika' package version 0.1.0 from PyPI. Remove any existing installations of this package to prevent potential data exfiltration. Since no patch or remediation is indicated, the best mitigation is to not use this package and monitor for any suspicious activity related to it.