VDB
GCVE-110-PYPI-2026-016137
GCVE-110-PYPI-2026-016137
Advisory Published
The PyPI package `local-operator` (version 0.73.12) was flagged as malicious by automated package analysis (2 corroborating detection(s)). Installing it may execute attacker-controlled code via setup.py or bundled Python sources. Verdict path: evidence — for ownership-only paths (owner-known-bad / multi-identity) the change of ownership is a compounding indicator the engine correlated with other signals, not standalone proof. This verdict is produced by static analysis and is subject to human review.
Weaknesses (CWE)
CWE-506Embedded Malicious CodeCWE-522Insufficiently Protected Credentials
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| pypi | local-operator | 0.44.59 (affected), 0.44.60 (affected), 0.44.64 (affected), 0.44.62 (affected), 0.44.66 (affected), 0.44.71 (affected), 0.44.67 (affected), 0.45.2 (affected), 0.45.3 (affected), 0.45.7 (affected), 0.44.54 (affected), 0.44.63 (affected), 0.46.7 (affected), 0.46.11 (affected), 0.46.7 (affected), 0.46.23 (affected), 0.46.12 (affected), 0.46.22 (affected), 0.47.5 (affected), 0.68.16 (affected), 0.68.18 (affected), 0.68.17 (affected), 0.68.19 (affected), 0.68.20 (affected), 0.68.21 (affected), 0.68.22 (affected), 0.68.24 (affected), 0.68.23 (affected), 0.68.25 (affected), 0.68.26 (affected), 0.68.27 (affected), 0.68.28 (affected), 0.70.1 (affected), 0.70.3 (affected), 0.70.2 (affected), 0.68.29 (affected), 0.69.0 (affected), 0.69.1 (affected), 0.69.2 (affected), 0.70.0 (affected), 0.70.4 (affected), 0.70.5 (affected), 0.70.6 (affected), 0.70.7 (affected), 0.70.8 (affected), 0.70.9 (affected), 0.70.10 (affected), 0.70.11 (affected), 0.70.12 (affected), 0.70.13 (affected), 0.70.14 (affected), 0.70.15 (affected), 0.70.16 (affected), 0.70.17 (affected), 0.70.19 (affected), 0.70.20 (affected), 0.70.21 (affected), 0.70.25 (affected), 0.70.22 (affected), 0.70.23 (affected), 0.70.24 (affected), 0.70.26 (affected), 0.70.27 (affected), 0.70.28 (affected), 0.70.29 (affected), 0.71.1 (affected), 0.71.2 (affected), 0.71.3 (affected), 0.71.4 (affected), 0.71.5 (affected), 0.72.0 (affected), 0.72.1 (affected), 0.73.0 (affected), 0.72.2 (affected), 0.73.1 (affected), 0.73.2 (affected), 0.73.12 (affected), 0.73.7 (affected), 0.73.3 (affected), 0.73.8 (affected), 0.73.6 (affected), 0.73.9 (affected), 0.73.10 (affected), 0.73.11 (affected) | — |
Browse GCVE Records
3,120 records in the GCVE database · Updated October 18, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.