Malicious code in advdef01 (PyPI)

The PyPI package advdef01 was identified as containing malicious code by the OpenSSF's malicious-packages project. The package was built using a template from the malpip repository (thegoodhackertv/malpip), which is designed to facilitate creation of malicious PyPI packages.\n\nThe malicious payload was executed via an override of the install command in setup.py, allowing code execution during package installation. The malware was designed to exfiltrate basic system information including the user's IP address and username.\n\nThis incident is classified as a low-quality malicious package created by a script kiddie using pre-prepared tools. The campaign identifier is SCRIPT_KIDDIE-thegoodhacker-paquete, indicating the use of publicly available malicious package templates.\n\nThe package has been identified and removed from PyPI. Users who installed advdef01 should assume their system information may have been compromised.