cache-compat-utils

{"modified":"2026-07-09T22:58:23Z","published":"2026-06-16T10:59:10Z","schema_version":"1.7.4","id":"MAL-2026-5878","summary":"Malicious code in cache-compat-utils (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (70fc75889476bd737b302c856fb1d2da1b263a93786bc27fed3978c3eb0584cd)\nThe package was found to contain malicious code or consuming dependency that contains malicious code\n\n## Source: kam193 (3abe4019efea5cdd405c9129e127f5d8b05456422574e40b01c6ec3b10177975)\nThe package contains obfuscated JS code with an infostealer harvesting all kinds of credentials, as well as a worm capable of spreading the infection further.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-06-cache-compat-utils\n\n\nReasons (based on the campaign):\n\n\n - obfuscation\n\n\n - malware\n\n\n - infostealer\n\n\n - exfiltration-credentials\n\n\n - exfiltration-ssh-keys\n\n\n - exfiltration-cloud-tokens\n","affected":[{"package":{"ecosystem":"PyPI","name":"cache-compat-utils"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"filename":"cache_compat_utils-0.1.0-py3-none-any.whl","hashes":{"blake2b_256":"ea797314755ce50aba1a6eb730e12d5890a0d2483765ba3849fb833c7c983b97","md5":"7b3508cce40c0227df11a2531cc450e6","sha256":"95d4c26b650e85fbeeb5c1fc41a63026d65bd10a1646964caf603e15390cc302"}},{"filename":"cache_compat_utils-0.1.0.tar.gz","hashes":{"blake2b_256":"1044feba4aa3d33318b763301dbcd8e8b74d1b1d98513db18e04884fe01243b8","md5":"c097b09be5a8261249d8579a7e60407d","sha256":"7af9708750fd749db6ae773d7ce0b34f6a7c69f21c6192c89091394103ad4869"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/cache-compat-utils"},{"type":"PACKAGE","url":"https://pypi.org/project/cache-compat-utils/0.1.0/"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["inspector-research@amazon.com"]},{"name":"Kamil Mańkowski (kam193)","type":"ANALYST","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"]}],"database_specific":{"malicious-packages-origins":[{"source":"kam193","sha256":"3abe4019efea5cdd405c9129e127f5d8b05456422574e40b01c6ec3b10177975","import_time":"2026-06-16T12:17:04.374071029Z","id":"pypi/2026-06-cache-compat-utils/cache-compat-utils","modified_time":"2026-06-16T10:59:10.135198Z","versions":["0.1.0"]},{"source":"amazon-inspector","sha256":"70fc75889476bd737b302c856fb1d2da1b263a93786bc27fed3978c3eb0584cd","import_time":"2026-07-09T22:56:32.672488626Z","id":"IN-MAL-2026-009541","modified_time":"2026-07-09T22:10:40Z","versions":["0.1.0"]}]}}