MAL-2026-1003Malicious code in cnnct-eaas-corre (PyPI)
| Ecosystem | Package | Version |
|---|---|---|
| PyPI | cnnct-eaas-corre | 1322.0.0 |
{"modified":"2026-02-23T16:00:12Z","published":"2026-02-23T16:00:12Z","schema_version":"1.7.4","id":"MAL-2026-1003","summary":"Malicious code in cnnct-eaas-corre (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: oracle-using-macaron (2111dcd49405f8c078842cf7af9cfe21ddb54f558d66f2949da752d0e62cddd1)\nThis package appears to be a typo-squatting attempt targeting connect-eaas-core.\n","affected":[{"package":{"ecosystem":"PyPI","name":"cnnct-eaas-corre","purl":"pkg:pypi/cnnct-eaas-corre"},"versions":["1322.0.0"]}],"credits":[{"name":"Oracle using Macaron","type":"FINDER","contact":["https://github.com/oracle/macaron"]}],"database_specific":{"malicious-packages-origins":[{"import_time":"2026-02-23T16:00:12Z","modified_time":"2026-02-23T16:00:12Z","sha256":"2111dcd49405f8c078842cf7af9cfe21ddb54f558d66f2949da752d0e62cddd1","source":"oracle-using-macaron","versions":["1322.0.0"]}]}}数据来源:OpenSSF Malicious Packages · Apache-2.0