> Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan
[DATE: 28/01/2026 09:30]
[LANGUAGE: EN]
Cybersecurity researchers have discovered two malicious packages in the Python Package Index (PyPI) repository that masquerade as spellcheckers but contain functionality to deliver a remote access trojan (RAT).
The packages, named spellcheckerpy and spellcheckpy, are no longer available for download, but not before they were collectively downloaded a little over 1,000 times.
"Hidden inside the