Suspicious 80% python Download

metrio 1000.0.0

Exfiltrates system info to C2

“Synack authorized dependency-confusion PoC placeholder”

Root Python setup.py packaging filesetup.py at or near the source root
SHA-256c76a5ad1db6a3f3cc41eeaf19b425207e51efb8053663f5a93fff75001f91c27
URLhttps://files.pythonhosted.org/packages/ce/f0/cd5b3f01ba283a874d26c137dcaed73876b953c7353f6ba958e49439fd4a/metrio-1000.0.0.tar.gz
MaleculeO₂(Eu₂S₂)H₃(Cm₆Db₂Os₂)Md₃(BkIn₂Pa₄)

Also flagged by osv (MAL-2026-17193: Malicious code in metrio (PyPI)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.