Benign python Download

donutautosellsrc 0.3.8

“Automated source-distribution and build utilities for donut payload packaging”

Root Python setup.py packaging filesetup.py at or near the source root
SHA-2565ee0ec6d2346b12f90e9bb7060dd12e7a4a809139bbf8965b4a4d6611934be33
URLhttps://files.pythonhosted.org/packages/51/ff/8ae21bc2cc03b36e0ea79ab61e137d103d80ecf90627500622b50feefbe6/donutautosellsrc-0.3.8.tar.gz
MaleculeK(Te)O₄(AsCPrS)H₆(Cm₇Db₇F₂Os₂Po₄U)Md₄(BkIn₈Pa₄)

Also flagged by osm (During installation package fetches code hidden in an image containing a Python application with a native extension module. This module holds an obfuscated infostealer which collects sensitive data an…), osv (MAL-2026-17192: Malicious code in donutautosellsrc (PyPI)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.