Vulnerability MAL-2026-17200

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
21 hours ago
September 27, 2026 at 02:15 PM UTC
Malicious code in aseity (PyPI)
0.1.0
0.1.0

Summary

Malicious code in aseity (PyPI)

Details

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-09-donutautosellsrc

Reasons (based on the campaign):

  • infostealer

  • Downloads and executes a remote executable.

  • obfuscation

  • malware

  • native-extension

  • steganography

  • c2-in-blockchain

  • The package contains code to detect if it is running in a sandbox environment.

Impacted packages

Timeline

Published
21 hours ago
September 27, 2026 at 02:15 PM UTC
Last Modified
19 hours ago
September 27, 2026 at 03:30 PM UTC