Logo
pypi

kmvn-ekjvnbwkhjbewv@0.2.5

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 12:44 PM UTC

Malicious

OSV ID

MAL-2024-12298

Ecosystem

pypi

Summary

Collects basic information about the system, most probably a pentest or bug bounty. --- Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: 2024-08-byted-22.ax Reasons (based on the campaign): - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.

Source: kam193 (b7bdb5dbe3c34fefec0edf3fec374c428af88d2600073a8db94054e7feb101fa)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.