asyncaiosignal

{"modified":"2026-03-19T12:23:25Z","published":"2025-02-13T13:18:05Z","schema_version":"1.7.4","id":"MAL-2025-2937","summary":"Malicious code in asyncaiosignal (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (8c9a16c81ad4cb5cef1907d6b9e4b5b352d53a6918e702610b428a455e799a2f)\nInfostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different innocent-looking names.\n\nThe campaign contains the with Infostealer itself and packages that include it as dependency and triggered.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2025-02-multis\n\n\nReasons (based on the campaign):\n\n\n - infostealer\n\n\n - The malicious code is intentionally included in a dependency of the package\n","affected":[{"package":{"ecosystem":"PyPI","name":"asyncaiosignal","purl":"pkg:pypi/asyncaiosignal"},"versions":["0.3","0.4","0.5"]}],"references":[{"type":"ARTICLE","url":"https://socket.dev/blog/2025-blockchain-and-cryptocurrency-threat-report"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/asyncaiosignal"}],"credits":[{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"Kamil Mańkowski (kam193)","type":"REPORTER","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"8875ab520fc8d915df5e087e3a6fae32577d4f55fd29a4135b77385dee479803","import_time":"2025-03-31T07:07:04.61607754Z","id":"RLMA-2025-01935","modified_time":"2025-03-28T13:05:19Z","versions":["0.3","0.4","0.5"]},{"source":"reversing-labs","sha256":"90c33ea036403342d65e0fa88616e1475f0b1d156f67adf68c2c852718f8b6a3","import_time":"2025-08-01T10:41:34.825020449Z","id":"RLUA-2025-03520","modified_time":"2025-07-31T19:13:59Z"},{"source":"kam193","sha256":"4764075428147bbedb89129b6391d245116558d32ce9034d18b6be25658b336f","import_time":"2025-12-02T22:30:54.949769987Z","id":"pypi/2025-02-multis/asyncaiosignal","modified_time":"2025-02-13T13:18:05Z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"source":"kam193","sha256":"8c9a16c81ad4cb5cef1907d6b9e4b5b352d53a6918e702610b428a455e799a2f","import_time":"2025-12-02T23:07:17.989384729Z","id":"pypi/2025-02-multis/asyncaiosignal","modified_time":"2025-02-13T13:18:05Z","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"source":"kam193","sha256":"36ee57298770fd4e3082a3351d218982879ecc5b55de6c7f9c01c5a497716799","import_time":"2025-12-10T21:38:57.294963504Z","id":"pypi/2025-02-multis/asyncaiosignal","modified_time":"2025-02-13T13:18:05Z","versions":["0.3","0.5","0.4"]},{"source":"kam193","sha256":"166ec74bed9be4b56633666a729febe046b60bd4ea62392c1c86f54e1de1d00a","import_time":"2025-12-30T22:39:04.041393501Z","id":"pypi/2025-02-multis/asyncaiosignal","modified_time":"2025-02-13T13:18:05Z","versions":["0.3","0.4","0.5"]},{"source":"reversing-labs","sha256":"aefd3c2d8099c71184bfb10e638d91d3b7f31a20a2e5e1b8c37092b23e6119d5","import_time":"2026-03-19T12:19:24.261786618Z","id":"RLUA-2026-00087","modified_time":"2026-03-18T12:11:16Z"}]}}