MAL-2026-18770: Malicious code in bundyfed (PyPI)
Published Nov 8, 2026
·Updated
--- -= Per source details. Do not edit below this line.=-
Source: kam193 (81b2cc96166cfebf7a2fb72d280ca06f5b9c4c9c735f6aee4beceafbce5430de) During installation, the package downloads a malicious executable holding an infostealer.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-bundyfed
Reasons (based on the campaign):
- Downloads and executes a remote executable.
- The package overrides the install command in setup.py to execute malicious code during installation.
Affected Software
1 affected component
pip/bundyfed=1.0.0, =1.0.1
Event History
Nov 8, 2026
Advisory Published
via OSV·09:22 PM
Data Sourced
via OSV·09:22 PM
DescriptionAffected Software