MalwareBleeping Computer
8.5 — CRITICAL
Malicious PyPI packages give hackers control of Telegram bot servers
A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks that allow attackers to read arbitrary files on compromised servers. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A campaign of malicious PyPI packages, targeting Python developers building Telegram bots with trojanized Pyrogram forks, has given hackers control of Telegram bot servers since November 2025.
⚙️Technical Details
💥Impact Assessment
Severity: critical
Who Is at Risk
Python developers building Telegram bots, particularly those using Pyrogram forks on PyPI
🛡️Recommended Actions
1Remove malicious PyPI packages immediately
2Rotate all credentials on affected servers and revoke Telegram bot tokens
3Monitor for suspicious activity and update Telegram bot security measures
📦Affected Products
Product Name: PyrogramAffected Version Range: 9 or later (versions 4.150 to 6.530)
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.