Vulnerability MAL-2026-18582
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
12 hours ago
November 03, 2026 at 09:46 PM UTC
Malicious code in zyto (PyPI)
0.2.0 - 0.2.3
0.2.0 - 0.2.3
Summary
Malicious code in zyto (PyPI)
Details
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-filipt
Reasons (based on the campaign):
-
The package overrides the install command in setup.py to execute malicious code during installation.
-
malware
-
rat
Impacted packages
Timeline
Published
12 hours ago
November 03, 2026 at 09:46 PM UTC
Last Modified
11 hours ago
November 03, 2026 at 11:15 PM UTC