Hostile 100% python Download

ekx-report-utils 0.2.0

DNS exfiltration of sandbox data

“EKX reporting utilities for quarterly analytics”

dnshook.site DNS canary/OOB serviceImports Python's subprocess module
SHA-256b20ff2deb2420a50967f41c53671a5275385b95c8982c8e5e7600fe8469bed09
URLhttps://files.pythonhosted.org/packages/e1/3c/50f7a2135210573e0f8bdac0163d13c9528739538e2bdb0d8be33295e78b/ekx_report_utils-0.2.0-py3-none-any.whl
MaleculeO₂(EuC)H₅(Cm₆Db₂FOsPo₂)

Also flagged by osv (MAL-2026-14555: Malicious code in ekx-report-utils (PyPI)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.