MAL-2026-1907Malicious code in prometheus-analysis (PyPI)
| Ecosystem | Package | Version |
|---|---|---|
| PyPI | prometheus-analysis | 0.1.0 |
| PyPI | prometheus-analysis | 0.1.1 |
| PyPI | prometheus-analysis | 0.1.2 |
{"modified":"2026-03-18T12:17:09Z","published":"2026-03-18T12:17:09Z","schema_version":"1.7.4","id":"MAL-2026-1907","summary":"Malicious code in prometheus-analysis (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"PyPI","name":"prometheus-analysis","purl":"pkg:pypi/prometheus-analysis"},"versions":["0.1.0","0.1.1","0.1.2"]}],"credits":[{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-00609","import_time":"2026-03-19T12:18:19.027117974Z","modified_time":"2026-03-18T12:17:09Z","sha256":"553ade2b6f42f2dc6782a1047a6195e940c73a1047f7f0c6b576ad797194f375","source":"reversing-labs","versions":["0.1.0","0.1.1","0.1.2"]}]}}数据来源:OpenSSF Malicious Packages · Apache-2.0