graphdict @3.4.14
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 11:32 AM UTC
OSV ID
MAL-2025-6515
Ecosystem
pypi
Summary
Malicious clone of legitimate networkx package with added hidden encrypted code. The exact behaviour unclear as it uses decryption key based on the arguments and config files --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-graphdict Reasons (based on the campaign): - Downloads and executes a remote malicious script. - obfuscation - clones-real-package
Source: kam193 (d6536224bd962025c65671a0007df1998dbc9485dfb2d628b0a0d57ab916487e)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.