Vulnerability MAL-2026-19259

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
November 13, 2026 at 07:47 PM UTC
Malicious code in qap793gl4l (PyPI)
0.1.1
0.1.1

Summary

Malicious code in qap793gl4l (PyPI)

Details

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-11-testing1345

Reasons (based on the campaign):

  • The package overrides the install command in setup.py to execute malicious code during installation.

  • Downloads and executes a remote malicious script.

  • rat

Impacted packages

Timeline

Published
5 hours ago
November 13, 2026 at 07:47 PM UTC
Last Modified
4 hours ago
November 13, 2026 at 08:15 PM UTC