MAL-2026-911Malicious code in malpkgv2-0 (PyPI)
| Ecosystem | Package | Version |
|---|---|---|
| PyPI | malpkgv2-0 | 0.1.0 |
{"modified":"2026-02-16T00:00:09Z","published":"2026-02-16T00:00:09Z","schema_version":"1.7.4","id":"MAL-2026-911","summary":"Malicious code in malpkgv2-0 (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: oracle-using-macaron (1f614e8ee6cce92be8b98394967c253336c0145808962bfda5032f085ece4eef)\nThis package executes arbitrary commands, steals sensitive data, exfiltrates credentials, and uses obfuscation techniques.\n","affected":[{"package":{"ecosystem":"PyPI","name":"malpkgv2-0","purl":"pkg:pypi/malpkgv2-0"},"versions":["0.1.0"]}],"credits":[{"name":"Oracle using Macaron","type":"FINDER","contact":["https://github.com/oracle/macaron"]}],"database_specific":{"malicious-packages-origins":[{"import_time":"2026-02-16T00:00:09Z","modified_time":"2026-02-16T00:00:09Z","sha256":"1f614e8ee6cce92be8b98394967c253336c0145808962bfda5032f085ece4eef","source":"oracle-using-macaron","versions":["0.1.0"]}]}}数据来源:OpenSSF Malicious Packages · Apache-2.0