Suspicious 80% python Download

dedh-devops-automation 5.6.999

Exfiltrates CI credentials via proxy

“DevOps automation utilities for CI/CD pipelines”

Root Python setup.py packaging filesetup.py at or near the source root
SHA-256399386b7d17b8b88e92bfa54b3b6f70b0556fb72b980e211b9b3934ac8bf1d1a
URLhttps://files.pythonhosted.org/packages/58/11/e8ce583d0523688c070279e59de48d5cac7bde3a0aae825f5504f45b4e1f/dedh_devops_automation-5.6.999.tar.gz
MaleculeO₄(AsCa₂EuS₃)H₇(Cm₂₀Cr₂Db₁₂FOs₆Po₃Ti)Md₃(BkIn₁₁Pa₂)

Also flagged by osv (MAL-2026-17455: Malicious code in dedh-devops-automation (PyPI)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.