Which versions of assistant-threader are malicious?

The following PyPI versions of assistant-threader are flagged malicious: 0.1. Treat any of these as compromised.

How do I remediate assistant-threader if I installed it?

assistant-threader is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

I already installed assistant-threader — how do I know if it already compromised me?

If assistant-threader was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is assistant-threader part of a known attack campaign?

Yes — assistant-threader is associated with the 2024-08-old-threading-assistant campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find assistant-threader across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for assistant-threader (version 0.1).

Malicious package

assistant-threaderPyPI

Advisory published Aug 19, 2024Updated Dec 12, 2025

assistant-threader is a confirmed malicious PyPI package (MAL-2024-12208) that steals credentials and exfiltrates sensitive data (malicious version 0.1). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in assistant-threader (PyPI)

MAL-2024-12208

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall assistant-threader

What this malware does

Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord webhook. Malicious code is split over multiple files.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2024-08-old-threading-assistant

Reasons (based on the campaign):

infostealer
typosquatting

Malicious versions

1 flagged

0.1

Indicators of compromise (SHA-256)

a1ea430d621b41fba4e0735ae902c78d200821e06ff696c3907b2b632b95b158

6dba125172b57e6b24bcd2cc0df076483e1fe36d1969f37e533d611fb6f9d808

19f7a11b85b828890424a45fcd7edfa7d4cc2109747eaab372bb5c191b35db4e

Detection & response playbook

Credential / info stealer

Find it
Search your lockfiles and build artifacts for assistant-threader (version 0.1).
If you installed it — respond
assistant-threader is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If assistant-threader was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. assistant-threader on PyPI has been identified as a malicious package (version 0.1 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

2024-08-old-threading-assistant

References

bad-packages.kam193.eu

Credits

Kamil Mańkowski (kam193)

Detect & block this

O3 blocks assistant-threader-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database