Logo
pypi

gcphelpit@0.1.2

Vulnerability report · Last retrieved from osv.dev September 1, 2026 at 9:47 PM UTC

Malicious

OSV ID

MAL-2026-15810

Ecosystem

pypi

Summary

During initialization of the CLI, the package exfiltrates sensitive files. Prior version 0.1.2 the code was launching a calculator as PoC instead of exfiltrating data. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-gcphelpit Reasons (based on the campaign): - files-exfiltration

Source: kam193 (d3e108475330381be537963456cb012b943f2d0a3693c83205f8f5b01f36635a)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW →SCAN DEPENDENCIES