Threats Tagged 'mal-2026-11418'
View all threats tagged with 'mal-2026-11418'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-11418'
Click on any threat for detailed analysis and mitigation recommendations
The PyPI package catalogai version 0.1.2 is part of a malicious campaign involving several packages that include hidden malware. These packages contain code that replaces cryptocurrency wallet addresses with attacker-controlled ones, exfiltrates browser data, installs malicious browser extensions, and enables remote control over the victim's device. The campaign is linked to North Korea's "Contagious Interview" threat actor group and targets cryptocurrency-related projects and interview assessments. The malicious functionality includes keylogging, clipboard modification, persistence, and remote command execution. Join the discussion | GCVE Database | 07/31/2026, 14:23:31 UTC Added: 07/31/2026, 15:37:29 UTC |
Showing 1 to 1 of 1 result