morty-package @0.0.0a1
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 4:33 PM UTC
OSV ID
MAL-2026-595
Ecosystem
pypi
Summary
Package presents an extremely deep obfuscation of a code that is imported during installation. The exact behavior is unknown, but it includes loading encrypted code and interrupting debugging attempts --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-01-pypi-package-explore Reasons (based on the campaign): - obfuscation - other
Source: kam193 (d87e4d2c5f3096d67a98e166e70ed6d4288c7d7554852e8d14bb60213f9a574b)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.