Hostile 100% python Download

friendly-greeting-tools 0.3.1

Obfuscated data exfiltration to Snowflake

“Small greeting utilities.”

Packed Python dynamic executionPython execs a Base64-decoded packed payload
SHA-2560980bf91351872847ac81c807e361997aa00e037f69e6d7093785b1ee5b376bd
URLhttps://files.pythonhosted.org/packages/23/5f/19c82ab9fda29de3ad8e272f1309f4016110fb36a0ba6ba0bc8eb0e8a9ba/friendly_greeting_tools-0.3.1-py3-none-any.whl
MaleculeO(As₄)H₅(Cm₂Db₉F₃PoU)Md₄(BkIn₆Pa₃)

Also flagged by osv (MAL-2026-17416: Malicious code in friendly-greeting-tools (PyPI)) +4 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.