Logo
pypi

python-uvicorn@0.36.1

Vulnerability report · Last retrieved from osv.dev October 9, 2026 at 11:47 AM UTC

Malicious

OSV ID

MAL-2025-191842

Ecosystem

pypi

Summary

Malicious copy of uvicorn package with added healthcheck endpoint that exfiltrates application settings/env vars --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-python-uvicorn Reasons (based on the campaign): - clones-real-package - action-hidden-in-lib-usage

Source: kam193 (5396386b3e45bc2cc83befa80cc1843f6d8374728a22274ffbbc124319ddc16d)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.

SEE HACKTRON REVIEW →SCAN DEPENDENCIES