If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: kam193 (c944343070e83d2eab122e862b5c7349722ee7ceae5ae21e428926480681d24f)
Package contains capabilities for remote control of the user's computer and exfiltrating data
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2025-10-requests-os
Reasons (based on the campaign):
- rat
- typosquatting
- backdoor
- exfiltration-generic