Logo
pypi

import-license-checker @0.1.1

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 10:32 AM UTC

Malicious

OSV ID

MAL-2025-191765

Ecosystem

pypi

Summary

Package exfiltrates content of .env files to a remote target --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-import-license-checker Reasons (based on the campaign): - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

Source: kam193 (c41ca4c8119fa20f7f5915b34de59f879b77fedf237cbbf5a69e46ddbeded428)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW → SCAN DEPENDENCIES