If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: amazon-inspector (8fdb099f519e4b3349d3800684dd052bd2eef6149061f36587fe69ffab780397)
Package sysdiagd version 1.2.2 on PyPI was examined across 15 files. No a static rule matches were produced and no concrete behavioral findings are available from the traced code review. The package name suggests a system diagnostics daemon, but no specific file, function, network destination, credential read, or install-time execution path has been corroborated with evidence in this record. Without a named installer-side data read tied to a specific destination, a named install-time or import-time execution path, or any other concrete fingerprint, the behavior of this version cannot be characterized as benign or malicious from the available signals alone.
Source: kam193 (0d396ad34176d29956d695014d261847ada859c184d7a8e7820d96087af7eafe)
Disguised as a system monitoring tool, the package delivers a Discord bot acting as an infostealer exfiltrating credentials, browser data, files and recording audio, screenshots and video. The code requires providing bot credentials, it is not functional without providing them.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-10-sysdiagd
Reasons (based on the campaign):
- rat
- exfiltration-browser-data
- persistence
- exfiltration-credentials
- files-exfiltration
- spyware-like
- infostealer