Which versions of cobo-python are malicious?

The following PyPI versions of cobo-python are flagged malicious: 0.1. Treat any of these as compromised.

How do I remediate cobo-python if I installed it?

cobo-python is a typosquat — you almost certainly intended a legitimately-named package. Remove cobo-python, install the correct package, and rotate any secrets exposed during the install since post-install scripts may have already run.

I already installed cobo-python — how do I know if it already compromised me?

If cobo-python was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is cobo-python part of a known attack campaign?

Yes — cobo-python is associated with the 2024-08-old-cobo-sectest campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find cobo-python across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for cobo-python (version 0.1).

Malicious package

cobo-pythonPyPI

Advisory published Sep 7, 2024Updated Dec 12, 2025

cobo-python is a confirmed malicious PyPI package (MAL-2024-12239) that typosquats a legitimate package to trick installs (malicious version 0.1). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in cobo-python (PyPI)

MAL-2024-12239

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall cobo-python

What this malware does

It appears to be a forgotten pentest checking typosquatting against cobo-custody package, but may also have malicious purposes. During installation, if a machine is Mac, an obfuscated code attempts to download and execute a shell script. Currently, the server does not respond.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: 2024-08-old-cobo-sectest

Reasons (based on the campaign):

Downloads and executes a remote executable.
clones-real-package
crypto-related
The package overrides the install command in setup.py to execute malicious code during installation.
obfuscation
typosquatting

Malicious versions

1 flagged

0.1

Indicators of compromise (SHA-256)

b82eae0c6205cc1598e48c7e84de9b78243c72d11ddabc80f9267377d8fdef00

2f1c1c4efd134e130c04178382ff3ea318301fb18b5eb6eed696c49cf64e9ad6

dc31f618c960275a328b61245b5861bb9e8dc319ecb1f046c1f621de05e54fd8

Detection & response playbook

Typosquat

Find it
Search your lockfiles and build artifacts for cobo-python (version 0.1).
If you installed it — respond
cobo-python is a typosquat — you almost certainly intended a legitimately-named package. Remove cobo-python, install the correct package, and rotate any secrets exposed during the install since post-install scripts may have already run.
Did it already run?
If cobo-python was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. cobo-python on PyPI has been identified as a malicious package (version 0.1 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

2024-08-old-cobo-sectest

References

bad-packages.kam193.eu

Credits

Kamil Mańkowski (kam193)

Detect & block this

O3 blocks cobo-python-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the malicious outbound activity and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database