Malicious Code Detected in zakuchienne Package - Infostealer Threat
Summary
MAL-2025-191940: Malicious code in zakuchienne (PyPI). Affects zakuchienne versions 0.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The zakuchienne package, available on PyPI, is designed for Python developers to facilitate specific functionalities. However, it has been compromised, embedding malicious code that acts as an infostealer. This vulnerability poses a significant risk to users, as it can exfiltrate sensitive information from their systems.
Vulnerability Detail
The vulnerability originates from a malicious actor, identified as kam193, who has embedded an infostealer within the zakuchienne package. When the module is imported, it activates the infostealer, which can collect and exfiltrate sensitive data such as browser credentials, files, and other personal information. The package also includes mechanisms to detect if it is running in a sandbox environment, making it more dangerous as it can evade detection.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall zakuchienneIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can avoid importing the zakuchienne package until a safe version is confirmed. Additionally, consider using a virtual environment to isolate dependencies and reduce the risk of exposure.
Conclusion
The zakuchienne package has been identified as containing malicious code that acts as an infostealer, posing serious risks to users. It is crucial to uninstall the package and monitor for updates. Users are encouraged to utilize tools like Vulert to stay informed about vulnerabilities in their applications.
See every vulnerability recorded for zakuchienne →
FAQ
The zakuchienne package is a Python library available on PyPI, intended for specific functionalities in Python development.
The infostealer activates upon importing the zakuchienne module, collecting sensitive information from the user's system and exfiltrating it to remote servers.
Immediately uninstall the zakuchienne package using pip uninstall zakuchienne and monitor for any updates or patches.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Using compromised packages can lead to data breaches, loss of sensitive information, and potential unauthorized access to your systems.
