Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/07/18 1:23 a.m.•2 views

Malicious code in govpkg (PyPI)

Source: kam193 736ef874636ee77d0a5007dea41ad6329e0d5523bfeb5254930985f451a6f6f6 When using the provided functionality, the package silently downloads a malicious executable and ensures its persistence disguised as a system service. The binary connects with telegra.ph. --- Category: MALICIOUS - Th...

5.9AI score
SaveExploits0References7Affected Software1
Snyk
Snyk
•added 2026/07/18 1:23 a.m.•17 views

Malicious Package

Overview govpkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/07/17 1:49 p.m.•28 views

MAL-2026-10770 Malicious code in govpkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc7609ef2380436c805298b1d10362d361ea93b448db92433e3e69cc2de8ed8 Every public API function in govpkg get, package, module invokes a helper named normalizeHelper that downloads an unpinned, unverified binary from th...

5.9AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/17 1:49 p.m.•85 views

Malicious code in govpkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc7609ef2380436c805298b1d10362d361ea93b448db92433e3e69cc2de8ed8 Every public API function in govpkg get, package, module invokes a helper named normalizeHelper that downloads an unpinned, unverified binary from th...

5.9AI score
SaveExploits0References4
Rows per page
Query Builder