Threats Tagged 'mal-2026-11417'
View all threats tagged with 'mal-2026-11417'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-11417'
Click on any threat for detailed analysis and mitigation recommendations
The aiprepkit package version 0.1.2 on PyPI contains malicious code as part of a broader campaign involving multiple packages. This malicious code includes functionality to replace cryptocurrency wallet addresses with attacker-controlled ones, exfiltrate browser data, establish remote control over the victim's device, install malicious browser extensions, and execute remote commands. The campaign is linked to North Korea's "Contagious Interview" threat group and targets cryptocurrency-related projects and interview assessments by abusing dependencies. The package acts as a vector for keylogging, clipboard modification, persistence, and remote access trojan (RAT) capabilities. Join the discussion | GCVE Database | 07/31/2026, 14:54:17 UTC Added: 07/31/2026, 15:37:23 UTC |
Showing 1 to 1 of 1 result