pypi
Malicious turbocalc @0.1.0
Vulnerability report · Last retrieved from osv.dev July 10, 2026 at 6:33 PM UTC
OSV ID
MAL-2026-10139
Ecosystem
pypi
Summary
During import an obfuscated code starts in-memory functions from a binary blob; after that, it communicates with dockfinancial[.]lu, the exact behaviour is unknown. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-turbocalc Reasons (based on the campaign): - obfuscation - other
Source: kam193 (ae55c7a3030f0ff3493a885460511e83e257b4bd6b3e347136c43518b3bddfa2)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.