THREATPKG
SYNC STALE

Supply-chain threat intelligence

Incident detail

criticalpypi·credential theft·osv

Malicious code in spaysrbx (PyPI)

spaysrbx

Risk score

92

AI summary

Indexed incident for spaysrbx (pypi).

Description

The package exfiltrates Roblox cookies from the victim machine.


Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-spaysrbdata

Reasons (based on the campaign):

  • infostealer

Technical details

Affected versions

=0.3.0

Indicators

  • affected version=0.3.075%

Timeline

  1. Advisory published
  2. Indexed by ThreatPkg

Related incidents