Logo
pypi

ln9qw38745g@0.1.1

Vulnerability report · Last retrieved from osv.dev November 4, 2026 at 3:25 AM UTC

Malicious

OSV ID

MAL-2026-18583

Ecosystem

pypi

Summary

Package ships an embedded executable identified as malware by AV vendors, and is related to a previously discovered package that after a few releases swapt benign exe with a malicious RAT. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-11-filipt Reasons (based on the campaign): - The package overrides the install command in setup.py to execute malicious code during installation. - malware - rat

Source: kam193 (e0a9c91e26a02abe14a9881a1c539a2f48d71aff120be6a4c286f36ee4cdd603)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.