pypi
Malicious num2words @0.5.16
Vulnerability report · Last retrieved from osv.dev July 23, 2026 at 9:18 AM UTC
OSV ID
MAL-2025-6794
Ecosystem
pypi
Summary
The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions have been removed from PyPI, and users are advised to remove the affected versions from their environments.
Source: ghsa-malware (23a528edd10eb63e7c7932830fdb314983cadc840ce8ccfbaa04ad821bbdc1da)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.