Which versions of cobo-custdy are malicious?

The following PyPI versions of cobo-custdy are flagged malicious: 0.1. Treat any of these as compromised.

How do I remediate cobo-custdy if I installed it?

cobo-custdy is a typosquat — you almost certainly intended a legitimately-named package. Remove cobo-custdy, install the correct package, and rotate any secrets exposed during the install since post-install scripts may have already run.

I already installed cobo-custdy — how do I know if it already compromised me?

If cobo-custdy was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is cobo-custdy part of a known attack campaign?

Yes — cobo-custdy is associated with the 2024-08-old-cobo-sectest campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find cobo-custdy across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for cobo-custdy (version 0.1).

Malicious package

cobo-custdyPyPI

Advisory published Sep 7, 2024Updated Dec 12, 2025

cobo-custdy is a confirmed malicious PyPI package (MAL-2024-12238) that typosquats a legitimate package to trick installs (malicious version 0.1). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in cobo-custdy (PyPI)

MAL-2024-12238

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall cobo-custdy

What this malware does

It appears to be a forgotten pentest checking typosquatting against cobo-custody package, but may also have malicious purposes. During installation, if a machine is Mac, an obfuscated code attempts to download and execute a shell script. Currently, the server does not respond.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: 2024-08-old-cobo-sectest

Reasons (based on the campaign):

Downloads and executes a remote executable.
clones-real-package
crypto-related
The package overrides the install command in setup.py to execute malicious code during installation.
obfuscation
typosquatting

Malicious versions

1 flagged

0.1

Indicators of compromise (SHA-256)

58ed63a140469c371d91c33972db5fc9a754b8557dd979ed32a8ee960d2ad10c

cd0d754c7d09b395a490411bfdba9006309e5227c634e9946f4612de907de0d0

6b9bf08d855d4ff8a72c16a8bd8e55a5e2f20a7f42c514ed484e6c997102630a

Detection & response playbook

Typosquat

Find it
Search your lockfiles and build artifacts for cobo-custdy (version 0.1).
If you installed it — respond
cobo-custdy is a typosquat — you almost certainly intended a legitimately-named package. Remove cobo-custdy, install the correct package, and rotate any secrets exposed during the install since post-install scripts may have already run.
Did it already run?
If cobo-custdy was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. cobo-custdy on PyPI has been identified as a malicious package (version 0.1 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

2024-08-old-cobo-sectest

References

bad-packages.kam193.eu

Credits

Kamil Mańkowski (kam193)

Detect & block this

O3 blocks cobo-custdy-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the malicious outbound activity and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database