smart-scheduler @0.1.4
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 10:32 AM UTC
OSV ID
MAL-2025-191661
Ecosystem
pypi
Summary
Package downloads and starts a malicious executable and hides its existence --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-10-smart-scheduler Reasons (based on the campaign): - Downloads and executes a remote executable. - exfiltration-generic - obfuscation - The package contains code to detect if it is running in a sandbox environment.
Source: kam193 (2792dcc5f5baaa05e1da756d9e57efedf800477f8b30e3c0b096d0baa17f59c9)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.