Which versions of pytgon are malicious?

The following PyPI versions of pytgon are flagged malicious: 1.0.0. Treat any of these as compromised.

How do I remediate pytgon if I installed it?

pytgon is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

I already installed pytgon — how do I know if it already compromised me?

If pytgon was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is pytgon part of a known attack campaign?

Yes — pytgon is associated with the RLMA-2024-09016, funcaptcha-ru campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find pytgon across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for pytgon (version 1.0.0).

Part of a larger attack: funcaptcha-ru published 161 malicious packages. See the full campaign →

Malicious package

pytgonPyPI

Advisory published Jun 28, 2024Updated Dec 12, 2025

pytgon is a confirmed malicious PyPI package (MAL-2024-10127) that steals credentials and exfiltrates sensitive data (malicious version 1.0.0). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in pytgon (PyPI)

MAL-2024-10127

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall pytgon

What this malware does

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: funcaptcha-ru

Reasons (based on the campaign):

infostealer

Malicious versions

1 flagged

1.0.0

Indicators of compromise (SHA-256)

73b89de2415a32f732a205f7db123ec117abf920d4c2e0f7d710e22d80365608

166670ef33765fcaac581f0f970727bbfddca45c534ed987b1e5cd88e521c569

88a9b4460da86e95041d7113c2bef2db5995a91d6cbf8babbd2d8717a9786e8b

f6ebee07c881453701da1e99a804c04762c6971d1ef3dcbaa28b34c79449a620

Detection & response playbook

Credential / info stealer

Find it
Search your lockfiles and build artifacts for pytgon (version 1.0.0).
If you installed it — respond
pytgon is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If pytgon was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. pytgon on PyPI has been identified as a malicious package (version 1.0.0 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

RLMA-2024-09016funcaptcha-ru

References

Credits

Kamil Mańkowski (kam193)
ReversingLabs · finder

Detect & block this

O3 blocks pytgon-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database