---
id: MAL-2026-11068
title: Malicious code in random-ua-generator (PyPI)
summary: Malicious code in random-ua-generator (PyPI)
severity: none
vendor: random-ua-generator
product: random-ua-generator
ecosystem: pip
affected:
  - random-ua-generator
published: '2026-07-26'
updated: '2026-07-26'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/MAL-2026-11068'
references:
  - url: 'https://bad-packages.kam193.eu/pypi/package/random-ua-generator'
tags:
  - osv
  - pip
ingestedAt: '2026-07-27T19:08:54.024Z'
---

## Overview


---
_-= Per source details. Do not edit below this line.=-_

## Source: kam193 (543206058a0b8e85c8227a0bfdd4752fc61779b24968a0bd5d50ae6b3040387b)
During import, the code starts a keylogger and exfiltrates data from cryptowallets.


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2026-07-random-ua-generator


Reasons (based on the campaign):


 - keylogger


 - exfiltration-crypto


## Affected packages

- `random-ua-generator`

## Remediation

Refer to the advisory for the patched release.