pypi

instaread @0.1.3

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 3:33 PM UTC

Malicious

OSV ID

MAL-2024-12292

Ecosystem

pypi

Summary

The file bc2556d1c1ea2a2d00.js contains an AdWare LNKR, this file is included in read_article.html template and effectively used when the user requests to see the downloaded article in the webbrowser (function "read" from instaread.py). Note: the template may have been copied from the website, so 'maybe' including adware is unintentional. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-10-old-instaread Reasons (based on the campaign): - action-hidden-in-lib-usage - The package is used to advertise a service or product.

Source: kam193 (792748013463fb0303ff6033b47dcb48c23dc944d5075a8859b6997eafd47a56)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.