pypi
Maliciousshortneer@0.1.0
Vulnerability report · Last retrieved from osv.dev October 1, 2026 at 11:21 PM UTC
OSV ID
MAL-2026-17422
Ecosystem
pypi
Summary
When used, the package exfiltrates Chrome extension files (likely targeting cryptocurrency wallets) and sensitive Telegram files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-sherpy Reasons (based on the campaign): - infostealer - exfiltration-crypto - target:telegram - native-extension
Source: kam193 (5e166ae1253c886885381cb5087f67a59a869cad6ece6f3ac40aefc6e463c27f)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.