Malicious code in langgrap (PyPI)

Source: kam193 80943fa86afe1c0cd0b657339f2125c48de0ca3cf9848b895e2e60ea744b1db9 Typosquatting package planting a malicious PTH file that during loading Python downloads the next stage. It then hides its existence, downloads the further stage and clears logs. The next stage exfiltrates sensitive...

MAL-2026-16133 Malicious code in langgrap (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11e221d911cf4904a1508f284da0ac0eb17a88e91dadb6dc60ef3bc5d547380 Package name langgrap is a one-character deletion of langgraph, and init.py re-exports from langgraph import so imports appear to succeed. The...

Malicious code in langgrap (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11e221d911cf4904a1508f284da0ac0eb17a88e91dadb6dc60ef3bc5d547380 Package name langgrap is a one-character deletion of langgraph, and init.py re-exports from langgraph import so imports appear to succeed. The...

Malicious Package

Overview langgrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...