Malicious
OSV ID
MAL-2025-47453
Ecosystem
pypi
Summary
This package installs the SilentSync remote access trojan and allows remote code execution and data exfiltration. Windows machines are targetted by this malicious package.
Source: google-open-source-security (0cc916986327ca493d55160fe841e48b756a40e030f59880874386e9e1e8a148)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.