tonetext@0.2.1
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 11:44 AM UTC
OSV ID
MAL-2025-191906
Ecosystem
pypi
Summary
When imported, the code embedded into the exception class downloads a remote file, and runs it by importing, and attempts to cover tracks by overwriting itself, removing caches and other related files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-tonetext Reasons (based on the campaign): - Downloads and executes a remote malicious script. - obfuscation
Source: kam193 (c46725ad6c88079cce4f7fa4a29175fec7f78ea83344da99d0f02ac4f020fcf3)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.