Vulnerability MAL-2026-19202

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
17 hours ago
November 12, 2026 at 10:25 PM UTC
Malicious code in dashloom (PyPI)
1.0.0 - 1.1.1
1.0.0 - 1.1.1

Summary

Malicious code in dashloom (PyPI)

Details

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-11-dashloom

Reasons (based on the campaign):

  • action-hidden-in-lib-usage

  • Downloads and executes a remote malicious script.

Impacted packages

Timeline

Published
17 hours ago
November 12, 2026 at 10:25 PM UTC
Last Modified
17 hours ago
November 12, 2026 at 11:15 PM UTC