pypi
Malicious synium @1.0.2
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 10:32 AM UTC
OSV ID
MAL-2025-192438
Ecosystem
pypi
Summary
During import, package exfiltrates specific global variables to a remote target in a way typical for infostealers --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-synium Reasons (based on the campaign): - exfiltration-credentials - exfiltration-generic
Source: kam193 (85fc917c33d970cb3365ff112f788b229638b757c32eaf99ba1054c8596298c1)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.