pypi

netpackat @1.0.4

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 2:32 PM UTC

Malicious

OSV ID

MAL-2025-5120

Ecosystem

pypi

Summary

Code download and runs an executable, which is widely recognized as malware. The system is also configured to run it on startup, and the file is saved in paths attempting to look as a system file. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-05-requestpackat Reasons (based on the campaign): - Downloads and executes a remote executable. - malware - peristence-autorun

Source: kam193 (f0f971eaa8aa4f59d981802034020fcd9b7c6008c2e9ed41a868a9e3186e7eed)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.