Which versions of glob-to-regexp are malicious?

The following PyPI versions of glob-to-regexp are flagged malicious: 2.1.1. Treat any of these as compromised.

How do I remediate glob-to-regexp if I installed it?

glob-to-regexp is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

I already installed glob-to-regexp — how do I know if it already compromised me?

If glob-to-regexp was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is glob-to-regexp part of a known attack campaign?

Yes — glob-to-regexp is associated with the RLMA-2025-03601, GENERIC-questionable-pentest, RLUA-2026-00354 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find glob-to-regexp across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for glob-to-regexp (version 2.1.1).

Malicious package

glob-to-regexpPyPI

Advisory published Sep 6, 2024Updated Mar 19, 2026

glob-to-regexp is a confirmed malicious PyPI package (MAL-2025-6510) that steals credentials and exfiltrates sensitive data (malicious version 2.1.1). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in glob-to-regexp (PyPI)

MAL-2025-6510

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall glob-to-regexp

What this malware does

Generic campaign for all (likely) research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: GENERIC-questionable-pentest

Reasons (based on the campaign):

exfiltration-env-variables
exfiltration-generic
The package overrides the install command in setup.py to execute malicious code during installation.
typosquatting

Malicious versions

1 flagged

2.1.1

Indicators of compromise (SHA-256)

b31da7c7fd7ad49ca8a9405ced3e86110db1d009d5c81b86b43d4b3ecf9c07f6

cf30ef4509936adbb986886d9c78944b3b479b6bbdbf5eb7229e05cc34b94d1c

ce8e1c3de8370811f29db098c2ca6d1fbd027017b5e29a9b540a3dbe8f58c704

02363deb3264955f06243b8df87b2198cf339eabd74b238d2c13c5023e1fcc89

48372e32eed896c82ce0275448fdb081d9f6bd7d20b4d947011cf7882da2293e

Detection & response playbook

Credential / info stealer

Find it
Search your lockfiles and build artifacts for glob-to-regexp (version 2.1.1).
If you installed it — respond
glob-to-regexp is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If glob-to-regexp was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. glob-to-regexp on PyPI has been identified as a malicious package (version 2.1.1 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

RLMA-2025-03601GENERIC-questionable-pentestRLUA-2026-00354

References

bad-packages.kam193.eu

Credits

Kamil Mańkowski (kam193)
ReversingLabs · finder

Detect & block this

O3 blocks glob-to-regexp-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database