file_path

~/.cache/.tf_cache/hw_probe.pyc

discovered 2026-07-24

Compiled-only (source-less) persistent copy of the stealer. Sibling artifacts in ~/.cache/.tf_cache: .lock_<machineid> guard and .ts_<machineid> timestamp files.

Linked packages

Read the full analysis →