🛡️ MAL-2025-6545 — managment

Malicious code in managment (PyPI)

Source: kam193

Installing the package starts a revshell and download and starts a remote script (depending on version, different malicious functionality). The name seems to imitate CPAN.org

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2025-06-cpan

Reasons (based on the campaign):

• The package contains code to create a reverse shell, allowing an attacker to execute any commands on the victim's machine.
• impersonation
• Downloads and executes a remote malicious script.