MAL-2026-19934: Malicious code in ps-bool (PyPI)
Published Nov 14, 2026
·Updated
--- -= Per source details. Do not edit below this line.=-
Source: kam193 (119ef283a7038fe02a4d309ce942bcce3a37a70ef5468749ae4f4e378d971e9d) During import, obfuscated code exfiltrates photos and documents to a Telegram bot. It targets Android devices.
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-ps-bool
Reasons (based on the campaign):
- files-exfiltration
- obfuscation
- uses-telegram-bot
- target:android
Affected Software
1 affected component
pip/ps-bool=0.2.0, =0.2.1, =0.2.3, =0.2.4, =0.2.5
Event History
Nov 14, 2026
Advisory Published
via OSV·03:28 PM
Data Sourced
via OSV·03:28 PM
DescriptionAffected Software