Suspicious 85% python Download

oh-my-wiki 2.25.0

Anomalous package hides outbound data exfiltration

“Karpathy-style LLM Wiki skill with multi-vault sqlite registry and Socratic wizard”

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook
SHA-2560915a2d03b5b32de55f1e48934c985417fc6b036b91c8db6ef165fbbe8364c56
URLhttps://files.pythonhosted.org/packages/25/17/85f066a1906f7cc87a2830a63271e11f8a66094fcecb94ab6eec94dfb83d/oh_my_wiki-2.25.0-py3-none-any.whl
MaleculeO₇(S₂AsC₃Er₃Eu₂IXe)H₆(Cm₉CrDb₃F₃Os₂Po₄)Md₃(BkPt)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.