pypi

iamenumerate @1.0.1

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 4:33 PM UTC

Malicious

OSV ID

MAL-2025-41688

Ecosystem

pypi

Summary

This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed (no other changes). It is anyway dangerous as most probably will be updated with the malicious code later --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-aws-enumerate Reasons (based on the campaign): - exfiltration-generic - action-hidden-in-lib-usage - exfiltration-credentials

Source: kam193 (d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.