Suspicious 80% python Download

claudedashbord 0.1.0

Executes remote signed payload

“A lightweight toolkit for building and monitoring AI/ML dashboards”

Source references XOR syntaxBase64 decoding behavior
SHA-25631e97a8f0e81bba55c4b7919da50ba35b84ddb9dd09c72bf3e366a20102602be
URLhttps://files.pythonhosted.org/packages/88/69/f64345bb60fc972d7e85e36478097ce8d0b180ce8ca0a51d4b902f6f31fd/claudedashbord-0.1.0-py3-none-any.whl
MaleculeO₄(AsCP₂S₂)H₆(Cm₄Cr₄Db₉F₂OsPo)Md₃(In₆Pa₂)

Also flagged by osv (MAL-2026-17195: Malicious code in claudedashbord (PyPI)) +4 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.