pypi
Malicious binproto @1.0.1
Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 4:30 AM UTC
OSV ID
MAL-2026-4810
Ecosystem
pypi
Summary
When using the provided functionality, the code silently downloads and executes a malicious executable. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-05-binproto Reasons (based on the campaign): - obfuscation - Downloads and executes a remote executable. - action-hidden-in-lib-usage - malware
Source: kam193 (72de81f36a15d75d302ca94b378c3e5025b6d0cb2d24360d06527130ed053ebd)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.