pymem-win@1.14.6
Vulnerability report · Last retrieved from osv.dev September 11, 2026 at 8:19 PM UTC
OSV ID
MAL-2026-16128
Ecosystem
pypi
Summary
During import, the obfuscated code downloads and executes an executable. The remote executable did not exist during analysis, but the repository used to host it overlaps with previous campaign 2026-07-yt-api-dlp --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-pymem-win Reasons (based on the campaign): - obfuscation - Downloads and executes a remote executable. - clones-real-package
Source: kam193 (82eb1f11c9b56a2f2c3e97530db43ef94784a2c75697223828403927b0528477)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.