Vulnerability MAL-2026-18328

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 days ago
October 26, 2026 at 09:58 AM UTC
Malicious code in netweavex (PyPI)
1.1.0 - 1.1.2
1.1.0 - 1.1.2

Summary

Malicious code in netweavex (PyPI)

Details

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-10-netweavex

Reasons (based on the campaign):

  • clones-real-package

  • obfuscation

  • Downloads and executes a remote malicious script.

  • typosquatting

Impacted packages

Timeline

Published
4 days ago
October 26, 2026 at 09:58 AM UTC
Last Modified
1 day ago
October 29, 2026 at 02:30 PM UTC