Suspicious 80% python Download

tokenade 6.0.1

Browser session hijacking and credential theft

“Production-grade token shifting and session portability tool”

Package advertises browser session replayPython Chromium DPAPI decryption
SHA-256daacd1aef14f4812f4e5bc62e7da5450f21c557721250f8b6945442a96f37723
URLhttps://files.pythonhosted.org/packages/fb/57/6380aacbd6e666ab79a93ee0c7ec40b988fefd2dca5482d0649e047485e0/tokenade-6.0.1-py3-none-any.whl
MaleculeK(Li)O₁₁(Ca₇Co₂IAs₂C₅Dy₆ErEu₄LaS₂Xe₂)H₈(Cm₂₁Cr₄Db₈F₁₀HfOs₈Po₈U₂)Md₄(PaPt)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.