{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "updateuuid4"
      },
      "versions": [
        "0.1.2"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "https://github.com/kam193",
        "https://bad-packages.kam193.eu/"
      ],
      "name": "Kamil Ma\u0144kowski (kam193)"
    },
    {
      "contact": [
        "https://github.com/kam193",
        "https://bad-packages.kam193.eu/"
      ],
      "name": "Kamil Ma\u0144kowski (kam193)",
      "type": "REPORTER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "pypi/2025-02-updateuuid4/updateuuid4",
        "import_time": "2025-12-02T22:30:55.691526181Z",
        "modified_time": "2025-02-08T19:36:34Z",
        "ranges": [
          {
            "events": [
              {
                "introduced": "0"
              }
            ],
            "type": "ECOSYSTEM"
          }
        ],
        "sha256": "f47e11e9651002d011f792dcc8f929a7a81f917ae289b7e275bd11c1f494cf8c",
        "source": "kam193"
      },
      {
        "id": "pypi/2025-02-updateuuid4/updateuuid4",
        "import_time": "2025-12-02T23:07:18.737518278Z",
        "modified_time": "2025-02-08T19:36:34Z",
        "ranges": [
          {
            "events": [
              {
                "introduced": "0"
              }
            ],
            "type": "ECOSYSTEM"
          }
        ],
        "sha256": "2c45f904631a26aae94cafeeac5ea0f7efe0fc5d4f46dea48da17dcb766111d5",
        "source": "kam193"
      },
      {
        "id": "pypi/2025-02-updateuuid4/updateuuid4",
        "import_time": "2025-12-10T21:38:57.909827401Z",
        "modified_time": "2025-02-08T19:36:34Z",
        "sha256": "0349938b8d343ef81cf67c14c439d06f44aaf2d94f0e86ee4781fd3fbae4e36f",
        "source": "kam193",
        "versions": [
          "0.1.2"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (2c45f904631a26aae94cafeeac5ea0f7efe0fc5d4f46dea48da17dcb766111d5)\nThe package, with an innocent looking name, has as the only functionality reporting to a Telegram channel given username and password. The functionality is in the \"HeadersUpdate\" class, that also looks like attempting to look innocent. The code does nothing more than reporting given credentials through a bot using the name \"hitlercute_bot\".\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2025-02-updateuuid4\n\n\nReasons (based on the campaign):\n\n\n - infostealer\n",
  "id": "MAL-2025-191917",
  "modified": "2025-12-11T09:27:54Z",
  "published": "2025-02-08T19:36:34Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://bad-packages.kam193.eu/pypi/package/updateuuid4"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in updateuuid4 (PyPI)"
}