Evidence · DiggingBeagle record
GitHub Advisory GHSA-f93h-mc69-274w, malicious pystr-codec
GHSA-f93h-mc69-274w identifies pystr-codec versions 0.1.0, 0.1.1 and 0.1.2 as malicious, with Python startup execution and a secondary JavaScript/Bun payload intended to harvest credentials and propagate.
- Source role
- primary disclosure
Evidence record
GHSA-f93h-mc69-274w identifies pystr-codec versions 0.1.0, 0.1.1 and 0.1.2 as malicious, with Python startup execution and a secondary JavaScript/Bun payload intended to harvest credentials and propagate.
Claim-level citations (1)
- supportspystr-codec PyPI malware uses Python startup hooks in an agent-tool supply-chain campaign: GHSA-f93h-mc69-274w identifies pystr-codec versions 0.1.0, 0.1.1 and 0.1.2 as malicious, with Python startup execution and a secondary JavaScript/Bun payload intended to harvest credentials and propagate.
GitHub malware advisory, package versions and payload summary