Vulnerability MAL-2026-19051
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 days ago
November 07, 2026 at 03:16 AM UTC
Malicious code in shanks (PyPI)
0.0.4
0.0.4
Summary
Malicious code in shanks (PyPI)
Details
The module shanks/shanks.py, when imported, looks up the machine's public IP address and location from a geolocation service and posts the IP address, city, state, postal code, latitude and longitude, with an @everyone mention, to a hard-coded Discord webhook. The package describes itself only as "A small example pkg". Version examined: 0.0.4; sdist SHA-256 dc417305d4b083a60ffda7aa310952306258fc12afc536a0641fc4a79c95bed8.
Impacted packages
Timeline
Published
3 days ago
November 07, 2026 at 03:16 AM UTC
Last Modified
4 hours ago
November 09, 2026 at 11:15 PM UTC