Malicious code in sympy-dev (PyPI)

Package downloads and executes code from remote servers, indicating malicious behavior. Multiple files and IPs involved. Package impersonates popular sympy package. --- Credit: OpenSSF source...

MSC-2026-1085

A malicious PyPI package called sympy-dev was discovered impersonating the legitimate SymPy mathematics library to distribute cryptomining malware. The fake package used similar branding and metadata to trick developers into installing it, and gained over 1,000 downloads within its first day. Onc...

Malicious code in sympy-dev (PyPI)

Package downloads and executes code from remote servers, indicating malicious behavior. Multiple files and IPs involved. Package impersonates popular sympy package...

EUVD-2026-4198

Malicious code in sympy-dev PyPI...