Vulnerability MAL-2026-17196

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-09-donutautosellsrc

Reasons (based on the campaign):

• infostealer

• Downloads and executes a remote executable.

• obfuscation

• malware

• native-extension

• steganography

• c2-in-blockchain

• The package contains code to detect if it is running in a sandbox environment.