Logo
pypi

gpu-free-ai@0.2.0

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 4:45 PM UTC

Malicious

OSV ID

MAL-2025-191743

Ecosystem

pypi

Summary

Code attempts to exfiltrate any env variable containing "key" in name. This action is triggered on multiple occasions thanks to overwriting module loading and patching. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-gpu-free-ai Reasons (based on the campaign): - exfiltration-env-variables

Source: kam193 (0846b9b18e7af4ddef44ca9cb92d5543ace58ee3f171080b1570c3f044749dec)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW →SCAN DEPENDENCIES