netspear @1.0.7
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 11:32 AM UTC
OSV ID
MAL-2025-5121
Ecosystem
pypi
Summary
Code download and runs an executable, which is widely recognized as malware. The system is also configured to run it on startup, and the file is saved in paths attempting to look as a system file. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-05-requestpackat Reasons (based on the campaign): - Downloads and executes a remote executable. - malware - peristence-autorun
Source: kam193 (015d4e7a345166ce5767408055a810a394e59a8c40b1a3c459ee006efa647e0a)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.