pypi
Maliciouspylever@1.0.12
Vulnerability report · Last retrieved from osv.dev September 10, 2026 at 8:15 AM UTC
OSV ID
MAL-2026-16122
Ecosystem
pypi
Summary
The package contains a stealer exfiltrating Discord tokens to a hardcoded location. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-pylever Reasons (based on the campaign): - infostealer
Source: kam193 (068694f49511d5a0c8678ca2196385c50cc68d1c526d5b151a6f2cdcfcae9b64)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.