Which versions of d4rktg are malicious?

The following PyPI versions of d4rktg are flagged malicious: 1.2.7. Treat any of these as compromised.

How do I remediate d4rktg if I installed it?

d4rktg establishes remote access, so treat any host that installed it as fully compromised. Isolate the machine, remove the package, rotate all credentials it could reach, and rebuild from a trusted image rather than cleaning in place — a backdoor may have planted additional persistence.

I already installed d4rktg — how do I know if it already compromised me?

If d4rktg was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is d4rktg part of a known attack campaign?

Yes — d4rktg is associated with the IN-MAL-2026-002624 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find d4rktg across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for d4rktg (version 1.2.7).

Malicious package

d4rktgPyPI

Advisory published May 13, 2026Updated May 13, 2026

d4rktg is a confirmed malicious PyPI package (MAL-2026-3688) that opens a backdoor for remote access (malicious version 1.2.7). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in d4rktg (PyPI)

MAL-2026-3688

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall d4rktg

What this malware does

The library's sole authorization primitive, CustomFilters.authorize() in d4rk/Utils/_filters.py, OR's the installer-supplied owner_id and sudo_users list with a hardcoded Telegram user ID 7859877609 (lines 48-53). Any developer who installs this package to build a Telegram bot and uses the library's advertised authorize() filter to gate owner/admin commands silently grants Telegram account 7859877609 the same privileges as the bot's declared owner — including whatever privileged actions the bot exposes (admin commands, sudo commands, shell-style handlers common in Telegram bot frameworks). The bypass is not documented, cannot be disabled through configuration, and is reachable through normal use of the library's public API. This is a hidden persistent-access backdoor against the installer's deployed bot, not author self-harm: the harm flows from the installer to an account under the package author's (or a third party's) control.

Malicious versions

1 flagged

1.2.7

Indicators of compromise (SHA-256)

3348d9f4bb35442b1de902c35ca46292f9336a8f83ac8deb7e870b2cd6af9019

Detection & response playbook

Backdoor / remote access

Find it
Search your lockfiles and build artifacts for d4rktg (version 1.2.7).
If you installed it — respond
d4rktg establishes remote access, so treat any host that installed it as fully compromised. Isolate the machine, remove the package, rotate all credentials it could reach, and rebuild from a trusted image rather than cleaning in place — a backdoor may have planted additional persistence.
Did it already run?
If d4rktg was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. d4rktg on PyPI has been identified as a malicious package (version 1.2.7 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

IN-MAL-2026-002624

References

pypi.org

Credits

Amazon Inspector · finder

Detect & block this

O3 blocks d4rktg-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the C2 callback and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database