MAL-2025-191946Malicious code in gtkfuscator (PyPI)
| Ecosystem | Package | Version |
|---|---|---|
| PyPI | gtkfuscator | 1.0.0 |
{"modified":"2025-12-02T20:04:20Z","published":"2025-12-02T20:04:20Z","schema_version":"1.7.4","id":"MAL-2025-191946","summary":"Malicious code in gtkfuscator (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: oracle-using-macaron (83b5a97c937ac16481e2ad27346069180a0a823c5f6b361cc4e7f08e97716c24)\nThis package decompresses and executes a base64-encoded malicious payload.\n","affected":[{"package":{"ecosystem":"PyPI","name":"gtkfuscator","purl":"pkg:pypi/gtkfuscator"},"versions":["1.0.0"]}],"credits":[{"name":"Oracle using Macaron","type":"FINDER","contact":["https://github.com/oracle/macaron"]}],"database_specific":{"malicious-packages-origins":[{"import_time":"2025-12-02T20:04:20Z","modified_time":"2025-12-02T20:04:20Z","sha256":"83b5a97c937ac16481e2ad27346069180a0a823c5f6b361cc4e7f08e97716c24","source":"oracle-using-macaron","versions":["1.0.0"]}]}}数据来源:OpenSSF Malicious Packages · Apache-2.0