clean-cybersource-rest-client-python (>=0.0.19, <=0.0.22), ozon-api-client (0.1.10) +2 more potentially affected by CVE-2026-59890 via setuptools (21.0.0)

setuptools PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - clean-cybersource-rest-client-python =0.0.19, =3.8.0, =3.9.0 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

Malicious Package

Overview @ozon-complt/split is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-3066 Malicious code in @ozon-complt/antibot-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2b2c8d66cf69cda5e16765e70a8c3615ecfc57baa6a283228bab60dcc337dc The package @ozon-complt/antibot-handler was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ozon-complt/antibot-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2b2c8d66cf69cda5e16765e70a8c3615ecfc57baa6a283228bab60dcc337dc The package @ozon-complt/antibot-handler was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ozon-complt/split (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c1f495268eb36a5d6c7f43e110ffb8cb58953bce375fdb4e6feb02818b3ce0 The package @ozon-complt/split was found to contain malicious code. Source: ghsa-malware...

MAL-2026-3067 Malicious code in @ozon-complt/split (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c1f495268eb36a5d6c7f43e110ffb8cb58953bce375fdb4e6feb02818b3ce0 The package @ozon-complt/split was found to contain malicious code. Source: ghsa-malware...

clean-cybersource-rest-client-python (>=0.0.19, <=0.0.22), ozon-api-client (0.1.10) +2 more potentially affected by CVE-2025-47273 via setuptools (21.0.0)

setuptools PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - clean-cybersource-rest-client-python =0.0.19, =3.8.0, =3.9.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

MAL-2024-2820 Malicious code in @ozon-shared-deps/ozon-maps__map-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2819 Malicious code in @ozon-shared-deps/ozon-fe__media-player-super-lite (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2818 Malicious code in @ozon-shared-deps/ozon-fe__media-player-standard (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7079 Malicious code in @ozon-shared-deps/dayjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ozon-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a05e800a141f7c456358b5d20b4e3cebc65f9d0229d0024fae5b1e51ed1e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ozon-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ozon-ob-toolbox/format-date

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ozon-ob-foundation/tracker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ozon-ob-foundation/communication

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ozon-ob-foundation/event-bus

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ozon-fe/media-player

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1370 Malicious code in @ozon-fe/media-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83f6ec5a227a2759eaf3a0f63b52ed88c790c3af44ea8bf3a9fa132d746220e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1027 Malicious code in @ozon-maps/map-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbfd1be2f4f9a09e5f0ba2fbef81062825b5959a48a8e035d3bc1a1aeb527421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...