Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2024-12-reqesst

Reasons (based on the campaign):

• infostealer

• peristence-autorun

• typosquatting

• exfiltration-generic

• Downloads and executes a remote executable.

• clones-real-package

• dependency-confusion

• exfiltration-browser-data

• exfiltration-crypto

---

Credit: OpenSSF (source)

Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2024-12-reqesst

Reasons (based on the campaign):

• infostealer

• peristence-autorun

• typosquatting

• exfiltration-generic

• Downloads and executes a remote executable.

• clones-real-package

• dependency-confusion

• exfiltration-browser-data

• exfiltration-crypto