Vulnerability MAL-2026-18131

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 days ago
October 21, 2026 at 10:01 PM UTC
Malicious code in iterquarry (PyPI)
2.1.1 - 2.2.1
2.1.1 - 2.2.1

Summary

Malicious code in iterquarry (PyPI)

Details

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-10-iterquarry

Reasons (based on the campaign):

  • obfuscation

  • The malicious code is intentionally included in a dependency of the package

  • action-hidden-in-lib-usage

Impacted packages

Timeline

Published
9 days ago
October 21, 2026 at 10:01 PM UTC
Last Modified
1 day ago
October 29, 2026 at 02:30 PM UTC