pypi
Maliciousrcp-ndcg@9999.0.0
Vulnerability report · Last retrieved from osv.dev November 5, 2026 at 4:30 AM UTC
OSV ID
MAL-2026-18658
Ecosystem
pypi
Summary
The OpenSSF Package Analysis project identified 'rcp-ndcg' @ 9999.0.0 (pypi) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Source: ossf-package-analysis (fc78014eaba6dbdc0a485f1954874cbfa65b71ffcda55b1b9337807004e42a2f)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.