Vulnerability MAL-2026-18771
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 day ago
November 08, 2026 at 09:47 PM UTC
Malicious code in extrahtml (PyPI)
0.1.0 - 0.1.2
0.1.0 - 0.1.2
Summary
Malicious code in extrahtml (PyPI)
Details
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-11-parseyaml
Reasons (based on the campaign):
-
The malicious code is intentionally included in a dependency of the package
-
Downloads and executes a remote malicious script.
References
Impacted packages
Timeline
Published
1 day ago
November 08, 2026 at 09:47 PM UTC
Last Modified
1 day ago
November 08, 2026 at 10:45 PM UTC