Vulnerability MAL-2026-18753
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 day ago
November 07, 2026 at 07:53 PM UTC
Malicious code in gcp-log-poc (PyPI)
0.0.1 - 0.0.3
0.0.1 - 0.0.3
Summary
Malicious code in gcp-log-poc (PyPI)
Details
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-gcp-log-poc
Reasons (based on the campaign):
-
exfiltration-env-variables
-
The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.
Impacted packages
Timeline
Published
1 day ago
November 07, 2026 at 07:53 PM UTC
Last Modified
13 hours ago
November 08, 2026 at 10:15 AM UTC