aiohttp-libscss @0.26.0
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 2:32 PM UTC
OSV ID
MAL-2024-9937
Ecosystem
pypi
Summary
Imitate legit package, when used, sends out the URL of web application using the package --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-08-app-url-to-telegram Reasons (based on the campaign): - clones-real-package - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk. - dependency-confusion - action-hidden-in-lib-usage
Source: kam193 (d5cb2d30b1084d16cbffd08a377d8723d794f112d1d33e666a4d4154653015e0)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.