—

Supply-chain threat intelligence

Incident detail

criticalpypi·credential theft·osv

Malicious code in redteam-qxz7-utils (PyPI)

redteam-qxz7-utils

Risk score

92

AI summary

Indexed incident for redteam-qxz7-utils (pypi).

Description

During installation, the package exfiltrates cloud tokens from the environment.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-redteam-qxz7-utils

Reasons (based on the campaign):

  • exfiltration-cloud-tokens

  • The package overrides the install command in setup.py to execute malicious code during installation.

Technical details

Indicators

  • affected version<function fixed() { [native code] }75%

Timeline

  1. Advisory published
  2. Indexed by ThreatPkg

Related incidents