Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2026/07/21 5:22 p.m.•5 views

Malicious code in spellcheckerpy (PyPI)

Source: kam193 79cc4c6495567fe7659e9e4bb5964727bf95cfc9f78d32209937d73457bd476b Packages contain hidden code that is effectively run during importing or using the library, and downloads second stage code. Then, a process running in background periodically connects to a remote host and waits for t...

6.3AI score
SaveExploits0References6Affected Software1
Mend
Mend
•added 2026/05/16 3:44 a.m.•3 views

MSC-2026-1086

Two fraudulent Python packages, spellcheckerpy and spellcheckpy, were discovered on PyPI claiming to be from the legitimate pyspellchecker library author. These packages contained hidden malware that downloads a remote access trojan RAT when imported, giving attackers full control over affected...

9.8CVSS6AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2026/01/28 9:30 a.m.•40 views

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

Cybersecurity researchers have discovered two malicious packages in the Python Package Index PyPI repository that masquerade as spellcheckers but contain functionality to deliver a remote access trojan RAT. The packages, named spellcheckerpy and spellcheckpy , are no longer available on PyPI, but...

6.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/20 7:06 p.m.•15 views

Malicious code in spellcheckerpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 79cc4c6495567fe7659e9e4bb5964727bf95cfc9f78d32209937d73457bd476b Packages contain hidden code that is effectively run during importing or using the library, and downloads second stage code. Then, a process running in...

5.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2026/01/20 7:06 p.m.•24 views

MAL-2026-375 Malicious code in spellcheckerpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 79cc4c6495567fe7659e9e4bb5964727bf95cfc9f78d32209937d73457bd476b Packages contain hidden code that is effectively run during importing or using the library, and downloads second stage code. Then, a process running in...

6AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/01/20 7:06 p.m.•11 views

EUVD-2026-3496

Malicious code in spellcheckerpy PyPI...

5.5AI score
SaveExploits0References2
Rows per page
Query Builder