Vulnerability MAL-2026-17897

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 hours ago
October 16, 2026 at 05:58 AM UTC
Malicious code in fromthehotel-poems (PyPI)
0.1.0
0.1.0

Summary

Malicious code in fromthehotel-poems (PyPI)

Details

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-10-fromthehotel-poems

Reasons (based on the campaign):

  • Downloads and executes a remote malicious script.

  • llm-threat

  • action-hidden-in-lib-usage

Impacted packages

Timeline

Published
3 hours ago
October 16, 2026 at 05:58 AM UTC
Last Modified
2 hours ago
October 16, 2026 at 06:45 AM UTC