If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
The module pyuserfox/agent.py, when imported, downloads a shell script from a hard-coded URL to /tmp, runs it with bash with all output discarded, then tries to delete it; any error is silently swallowed. The package's metadata and README present it as a copy of the argparse command-line parsing library, which it does not contain. Version examined: 0.0.2; sdist SHA-256 0735e378d4c384183d5576325d23a648d07053684fe7e1d8144705dbb45b0e02.
---
_-= Per source details. Do not edit below this line.=-_
Source: kam193 (23edaa0c720d313b1598b1391f83081eab817e337c65033b28755ad7f46af0dd)
During import, package silently download and executes remote code. There is no other action. During analysis, the remote code was no longer accessible. The campaign was originally discovered by Threx-code.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-old-pyuserfox
Reasons (based on the campaign):
- Downloads and executes a remote malicious script.
Indicators of compromise
Shown defanged and not clickable. Search any indicator to find other packages using it.
URLs
- hxxps://dark[.]devsecwise[.]com/xmnp[.]sh other packages →