Vulnerability MAL-2026-18770
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 day ago
November 08, 2026 at 09:22 PM UTC
Malicious code in bundyfed (PyPI)
1.0.0 - 1.0.1
1.0.0 - 1.0.1
Summary
Malicious code in bundyfed (PyPI)
Details
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-bundyfed
Reasons (based on the campaign):
-
Downloads and executes a remote executable.
-
The package overrides the install command in setup.py to execute malicious code during installation.
References
Impacted packages
Timeline
Published
1 day ago
November 08, 2026 at 09:22 PM UTC
Last Modified
1 day ago
November 08, 2026 at 10:15 PM UTC