MAL-2026-17862
Malicious code in fontcase (PyPI)
Published Oct 13, 2026 · updated Oct 13, 2026
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (9e2c4992e5295f2b094f3c7c2b2e6c2dbc8d0d9ca6242d58318e6e1b83a4255c) During import, the package downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-fontcase Reasons (based on the campaign): - infostealer - Downloads and executes a remote executable. - uses-telegram-bot - exfiltration-browser-data - exfiltration-credentials
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (9e2c4992e5295f2b094f3c7c2b2e6c2dbc8d0d9ca6242d58318e6e1b83a4255c) During import, the package downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-fontcase Reasons (based on the campaign): - infostealer - Downloads and executes a
Oct 13, 2026 · Catalog
Updated
--- _-= Per source details. Do not edit below this line.=-_ ## Source: kam193 (9e2c4992e5295f2b094f3c7c2b2e6c2dbc8d0d9ca6242d58318e6e1b83a4255c) During import, the package downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-fontcase Reasons (based on the campaign): - infostealer - Downloads and executes a
Affected
- PyPI fontcase0.1.0, 0.1.1, 0.1.2