—

Supply-chain threat intelligence

Incident detail

criticalpypi·credential theft·osv

Malicious code in telegram-lite-grabber (PyPI)

telegram-lite-grabber

Risk score

92

AI summary

Indexed incident for telegram-lite-grabber (pypi).

Description

Package exfiltrates data from the Telegram application to a remote location, effectively collecting Telegram sessions.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-06-telegramlite

Reasons (based on the campaign):

  • target:telegram

  • files-exfiltration

Technical details

Affected versions

=1.0.0

Indicators

  • affected version=1.0.075%

Timeline

  1. Advisory published
  2. Indexed by ThreatPkg

Related incidents