目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%
← 返回恶意软件包
PyPI active

py-devoli-common

MAL-2026-15693
2026-09-09 03:23:52
OpenSSF Malicious Packages
该软件包被识别为恶意包。建议隔离受影响环境,并排查凭据泄露和异常网络连接。

Summary

Malicious code in py-devoli-common (PyPI)

文件/数据外传
AI 分析整理qwen3.6
基于上游报告生成,请以下方原始证据为准。
公开使用量数据
统计周期
—
下载量
—
数据源
暂无公开数据
下载量只代表仓库活动度,不等于已被入侵的安装数量。
永久样本归档NAS
版本状态大小SHA-256获取方式
999.999.999unavailable———
样本保存在内网 NAS 隔离区,不公开镜像地址;已开通会员可直接从平台下载。同步任务不会解压或执行样本。
受影响版本
EcosystemPackageVersion
PyPIpy-devoli-common999.999.999
恶意行为说明OpenSSF OSV
上游来源证据
展开原始 OSV JSON
{"schema_version":"1.7.4","id":"MAL-2026-15693","published":"2026-08-24T16:13:45Z","modified":"2026-09-09T03:23:51.789223552Z","summary":"Malicious code in py-devoli-common (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d)\nThe package was found to contain malicious code or consuming dependency that contains malicious code\n","affected":[{"package":{"name":"py-devoli-common","ecosystem":"PyPI","purl":"pkg:pypi/py-devoli-common"},"versions":["999.999.999"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"filename":"py_devoli_common-999.999.999-py3-none-any.whl","hashes":{"blake2b_256":"c94ad266cf9a86df6c69aef414fd67d0e8b90805b85a89d66c70c83ec5feedb1","md5":"4a1ab96e64c31680512ea3f140069dba","sha256":"4433bf8605e44d6ce2d89a3d28d1d70c57100710109395df34b81a960337c637"}},{"filename":"py_devoli_common-999.999.999.tar.gz","hashes":{"blake2b_256":"97325c3a636225374d1e021944e94997161fc423c623e65f007714e6820331b9","md5":"bdb6d1a5dedc451cba8a733dcc64930f","sha256":"f34f5ef50173bd0f55d95f526bc4d4b0c4e978dd707cdfc2010116cba4f1ddcb"}}]}}}],"references":[{"type":"PACKAGE","url":"https://pypi.org/project/py-devoli-common/999.999.999/"}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-05657","import_time":"2026-09-01T11:17:14.555384815Z","modified_time":"2026-08-24T16:13:45Z","sha256":"1e1e79e7bca71034facb5829f6f88e9e124b5009148e8b86c11a1433557ff4df","source":"reversing-labs","versions":["999.999.999"]},{"id":"IN-MAL-2026-019809","import_time":"2026-09-09T03:21:56.051576881Z","modified_time":"2026-09-09T02:48:55Z","sha256":"33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d","source":"amazon-inspector","versions":["999.999.999"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}

数据来源:OpenSSF Malicious Packages · Apache-2.0