VDB
MAL-2026-2819
MAL-2026-2819
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Malicious code in pynosist (PyPI)
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PyPI | pynosist | 0.1.0, 0.1.1, 0.1.2 |
Timeline
- Apr 16, 2026 CVE Published
- Apr 16, 2026 CVE Updated
References
- https://bad-packages.kam193.eu/pypi/package/pynosist url
- https://github.com/genoshide/polymarket-arbitrage-trading-bot/blob/adfcde4ac6da19084e0714af3acd3e93cd46b5bc/requirements.txt#L20 url
- https://github.com/genoshide/wallet-mcp/blob/0fad37d8d1bd6520be576128ebc9009a6b5903f0/pyproject.toml#L23 url
- https://github.com/genoshide/opensea-auto-mint-bot/blob/27bc619b4d3beffa214f3e034b1b00b0487cf947/requirements.txt#L3 url
- https://github.com/genoshide/infinity-router/commit/34f30285acafe21b17777587cf38dc6553a23e66 fix
- https://github.com/genoshide/solana-account-closer-bot/commit/73750693ec625298be478ce820ef82c844e47c89 fix