Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/04 6:31 p.m.•5 views

Malicious code in olympuslib (PyPI)

Source: kam193 cd83c1af6eb40f933f46c498402bb147ea6a5e559a51718fe0ffd775354473cc During import, the package exfiltrates environment variables. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-amirgo4496 Reasons based on the campaign: -...

5.8AI score
SaveExploits0References5Affected Software1
osv_mal
osv_mal
•added 2026/09/04 3:02 p.m.•22 views

MAL-2026-15928 Malicious code in olympuslib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcee7d29dcf5e9c04cc3528403c15c3359c6701eaf42f54ecaa2ac4c29a4b3c Top-level init.py invokes a canary routine on import that serializes the entire os.environ dictionary along with socket.gethostname and package...

5.7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/04 3:02 p.m.•53 views

Malicious code in olympuslib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcee7d29dcf5e9c04cc3528403c15c3359c6701eaf42f54ecaa2ac4c29a4b3c Top-level init.py invokes a canary routine on import that serializes the entire os.environ dictionary along with socket.gethostname and package...

5.6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•15 views

Malicious Package

Overview olympuslib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder