MAL-2026-18580: Malicious code in filipt (PyPI)
Published Nov 3, 2026
·Updated
--- -= Per source details. Do not edit below this line.=-
Source: kam193 (c7d24a42d93443e6dd0a5c3899e31e60624c1564a215ad84be99be1e811205ca) The package ships a malicious executable started during the building of a wheel/installation. It has been identified as Overlord RAT.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-filipt
Reasons (based on the campaign):
- malware
- The package overrides the install command in setup.py to execute malicious code during installation.
- rat
Affected Software
1 affected component
pip/filipt=0.1.0, =0.1.1, =0.1.2, =0.1.3, =0.1.4, =0.1.5
Event History
Nov 3, 2026
Advisory Published
via OSV·07:28 PM
Data Sourced
via OSV·07:28 PM
DescriptionAffected Software