Tag: wheel packages

1 Attack Reports | 0 Vulnerabilities

Attack reports

OceanLotus suspected of distributing ZiChatBot malware via wheel packages in PyPI

Between July 2025 and present, threat actors suspected to be OceanLotus distributed malicious wheel packages through PyPI targeting both Windows and Linux platforms. Three fake libraries (uuid32-utils, colorinal, and termncolor) were created to imitate legitimate packages, implementing a sophistica…
dropper
pypi
cross-platform
supply chain attack
python packages
2026-05-06
wheel packages
zichatbot
zulip c2
Published: May 6, 2026
Downloadable IOCs: 9
Click here to see more Attack Reports