Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

Vulnerability IntelligenceMAL-2026-846

MAL-2026-846

CRITICALMalware10.0

Malicious code in cryptowallethash (PyPI)

Published Feb 10, 2026

Modified 3 weeks ago

Details

-= Per source details. Do not edit below this line.=-

Source: kam193 (4d493d3c40b5136dd3ffea29264cf1066247cda3a10094201b4f71554ae3e592)

The package claims to calculate a hash value for usage in "cryptocurrency", but before returning the hash, it exfiltrates the plain value.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-02-old-cryptowallethash

Reasons (based on the campaign):

crypto-related
exfiltration-crypto

Affected Packages

cryptowallethash

PyPI

Affected versions:

0.0.60.0.70.0.8

References

WEB

https://bad-packages.kam193.eu/pypi/package/cryptowallethash

WEB

https://github.com/akioguru/cryptowallethash

WEB

https://github.com/akioguru/cryptowallethash/blob/main/cryptowallethash/functions.py#L8

CVSS Analysis

CVSS v3.1

10.0

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

10.0/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Ecosystems

PyPI

Credits

Kamil Mańkowski (kam193)(REPORTER)

Timeline

PublishedFeb 10, 2026

ModifiedFeb 10, 2026

MAL-2026-846 | Mondoo Vulnerability Intelligence