Which versions of text-adventure-game are malicious?

The following PyPI versions of text-adventure-game are flagged malicious: 0.1.0, 0.1.1, 0.1.2, 0.1.3. Treat any of these as compromised.

How do I remediate text-adventure-game if I installed it?

text-adventure-game is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

I already installed text-adventure-game — how do I know if it already compromised me?

If text-adventure-game was ever installed, its post-install/runtime payload may have already executed. O3's L7 egress monitoring and runtime eBPF sensors detect the credential exfiltration or command-and-control callback after install and block the malicious outbound channel, so you catch and contain the actual compromise — not just the presence of the package.

Is text-adventure-game part of a known attack campaign?

Yes — text-adventure-game is associated with the RLMA-2024-09406, text-adventure-game-ch-2024-07, RLUA-2026-00814 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find text-adventure-game across my projects, lockfiles, and CI pipelines?

Scan your lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock, requirements.txt, poetry.lock, etc.) and build artifacts for text-adventure-game (4 malicious versions). O3 Security's supply-chain scanner checks every dependency against known-malicious package intelligence at install time and in CI, flagging text-adventure-game across your stack and pipelines.

Malicious package

text-adventure-gamePyPI

Malicious code in text-adventure-game (PyPI) Remove it immediately and rotate any exposed credentials.

MAL-2024-10172

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall text-adventure-game

What this malware does

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: text-adventure-game-ch-2024-07

Reasons (based on the campaign):

Malicious versions

4 flagged

0.1.00.1.10.1.20.1.3

Indicators of compromise (SHA-256)

4927e194c3a8c7c5433b52911f7b787fea11473a5605df1ddd9081c84bc74fb3

b2df5b52ef2fce3126ec3a6997102151ee0bb0db546ce774682118f3200596e1

d130695c8c001b5c9dcdb269da4709b4b1d6f75407f319a7ed709f2370212fdd

918839784149748312cc8dcf92588b383d0970c44b5a841fcae3936e11353e41

f996320e8d8b7f8d4a79a5ba02b6e4b09980df17ed55a28b0203d560bea6a83f

Detection & response playbook

Credential / info stealer

Find it
Scan your lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock, requirements.txt, poetry.lock, etc.) and build artifacts for text-adventure-game (4 malicious versions). O3 Security's supply-chain scanner checks every dependency against known-malicious package intelligence at install time and in CI, flagging text-adventure-game across your stack and pipelines.
If you installed it — respond
text-adventure-game is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If text-adventure-game was ever installed, its post-install/runtime payload may have already executed. O3's L7 egress monitoring and runtime eBPF sensors detect the credential exfiltration or command-and-control callback after install and block the malicious outbound channel, so you catch and contain the actual compromise — not just the presence of the package.
How O3 protects you
O3 blocks text-adventure-game before install through its supply-chain scanner, and if it has already run, detects and severs the exfiltration or C2 callback at runtime through L7 egress monitoring and eBPF.

Frequently asked questions

No. text-adventure-game on PyPI has been identified as a malicious package (versions 0.1.0, 0.1.1, 0.1.2, 0.1.3 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

RLMA-2024-09406text-adventure-game-ch-2024-07RLUA-2026-00814

References

bad-packages.kam193.eu

Credits

Kamil Mańkowski (kam193)
ReversingLabs · finder

Detect & block this

O3 blocks text-adventure-game-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring