PyPI loader malware campaign: dashloom & acustoviasr — malicious packages download and execute remote code (no CVE)
Severity: critical · Patch status: no-fix-needed · Since 2026-11-13
GitHub Advisory Database (via OpenSSF malicious-packages) published malware advisories for two PyPI packages on 2026-11-13. dashloom (versions 1.0.0–1.1.1) is a malicious loader that pins a vulnerable pydash dependency, abusing pydash.invoke(...) to escape object scope and execute code split across a now-benign GitHub file; the same account also published a repository executing embedded encrypted code. acustoviasr (0.1.0) belongs to a coordinated campaign of similar loader packages that execute code fetched from a URL, though no payload or observed usage is known. Both are classified MALICIOUS with infostealer-style intent, no patched versions exist, and the packages should be treated as compromised. Any project depending on them is exposed to arbitrary remote code execution.
What to do
- Remove and purge dashloom and acustoviasr from all environments, lockfiles, and caches; treat any machine that installed them as compromised
- Audit dependency trees and CI caches for the affected packages and versions (dashloom 1.0.0–1.1.1, acustoviasr 0.1.0)
- Rotate credentials, tokens, and secrets accessible from affected build or dev environments
- Review logs and GitHub/PyPI activity for connections fetching remote scripts or unexpected pydash.invoke usage
- Prefer pinned, hashed dependencies and block installs of newly published unvetted packages
Sources
All live incidents on Threat Watch
