VDB

GCVE-VVD-OSM-2026-712

GCVE-VVD-OSM-2026-712
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published March 6, 2026
Malicious package detected. Behaviors: code execution. Payload: setup.py Key findings: - Shell Command Execution in setup.py: "subprocess.Popen(" - setup.py Code Execution in setup.py: "class Install(InstallCommand): def run(self): #params = "{install_..." - Setup.py Command Override in setup.py: "cmdclass={'install'" - Shell Command Execution in wdc: "os.system(" IOCs: - urls: https://downloader.disk.yandex.ru/preview/0235fbd15e7ec0b26f90f2a80935e61e89df0572ecad6d009139c25658b3fce2/64d55395/iA_1u4ujWUcmzOBmOKRwtb_lybIQbDByhbVcvWnDbrlIYYObFDu7quXYclv4yhIQz_6v2pS4EFk0ILdrbdbNMw%3D%3D?uid=0&filename=2023-08-10_20-15-15.png&disposition=inline&hash=&limit=0&content_type=image%2Fpng&owner_uid=0&tknv=v2&size=2048x2048, https://downloader.disk.yandex.ru/preview/1605df921d82ea993000363f496952d766965d912b3bb5d147707bc678c67142/64d55497/aKVGJ-14kMQQzdRvvnF1wJJh_pjTCokqL8a_l8HNz8cxq--7ozbljK4h_JZUKeIuxviiBz_vTQFhFAPbxXV8mg%3D%3D?uid=0&filename=2023-08-10_20-18-26.png&disposition=inline&hash=&limit=0&content_type=image%2Fpng&owner_uid=0&tknv=v2&size=2048x2048, https://downloader.disk.yandex.ru/preview/6b304b771c5dbb88c3546612e12f198cdbec4c0279c5e5e089c2e9341d2b7495/64d55564/dCTCH_ho22FI4FekYIIlcdJ6b7FmasDcAADZq8mRX9SHmeEdF1xT9PVg6zQjBq8VQUKqwfidJfCr_e8D0O6rQA%3D%3D?uid=0&filename=2023-08-10_20-22-44.png&disposition=inline&hash=&limit=0&content_type=image%2Fpng&owner_uid=0&tknv=v2&size=2048x2048, https://downloader.disk.yandex.ru/preview/31b07d1ef35e68567aeab06ae80baf47864f85e8e23f0448f213f158f09a2c49/64d5560d/SVqPdcGkDamkJ8eLH0eZCfAnfKG6nyf7FmKBEzpzB1XKGx1HhEB_dTylQ12PMg2SUf40nnmBJE63qfhqY5Efaw%3D%3D?uid=0&filename=2023-08-10_20-26-02.png&disposition=inline&hash=&limit=0&content_type=image%2Fpng&owner_uid=0&tknv=v2&size=2048x2048, https://downloader.disk.yandex.ru/preview/50298680d514b318da42a8b0831bcae646068c68dad22d4391477959a43d1009/64d556e2/iHwYS6KkLqtHa-rS0zUESlywuvzLE_iOxW9kqM4ySvamxEeomwE2_LgRPy_zgIkv-NzkfzDF8XSGG6LbaHbPrA%3D%3D?uid=0&filename=2023-08-10_20-29-41.png&disposition=inline&hash=&limit=0&content_type=image%2Fpng&owner_uid=0&tknv=v2&size=2048x2048 (+6 more) - domains: downloader.disk.yandex.ru, webdav.yandex.ru, webdav.cloud.mail.ru, internet.ru, self.client.info (+4 more) - emails: rkorkunov@internet.ru - telegramBots: 6582857829:AAHrOHPCxSB_8IVP6kRWFdXLD_klbbOdNhA - sha256Hashes: 0235fbd15e7ec0b26f90f2a80935e61e89df0572ecad6d009139c25658b3fce2, 1605df921d82ea993000363f496952d766965d912b3bb5d147707bc678c67142, 6b304b771c5dbb88c3546612e12f198cdbec4c0279c5e5e089c2e9341d2b7495, 31b07d1ef35e68567aeab06ae80baf47864f85e8e23f0448f213f158f09a2c49, 50298680d514b318da42a8b0831bcae646068c68dad22d4391477959a43d1009 (+1 more) - payloadFileHash: 1b768774c8bef6ad1562d0c10eb687d60a12d830b61e1b3c8d0b53d07c64ec70
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownpython-module-installer3.15.10 (affected)—

Aliases

MAL-2026-1263

Transitive aliases

MAL-2026-2238VVD-OSM-2026-631MAL-2026-2104VVD-OSM-2026-188MAL-2026-1963VVD-OSM-2026-64MAL-2026-2176VVD-OSM-2026-35MAL-2026-1992GHSA-3qf5-vfww-7p7gVVD-OSM-2026-638VVD-OSM-2026-549MAL-2026-1927VVD-OSM-2026-534VVD-OSM-2026-16MAL-2026-1574VVD-OSM-2026-161MAL-2026-1558VVD-OSM-2026-731VVD-OSM-2026-191VVD-OSM-2026-90VVD-OSM-2026-535GHSA-p4gv-m838-2xq9GHSA-ppr8-pvc2-8f99MAL-2026-2103MAL-2026-2110VVD-OSM-2026-256VVD-OSM-2026-18MAL-2026-2243GHSA-r934-qgg3-v7fgVVD-OSM-2026-112MAL-2026-1063VVD-OSM-2026-253VVD-OSM-2026-241GHSA-p5gg-75q6-vp64VVD-OSM-2026-251VVD-OSM-2026-700MAL-2026-1947VVD-OSM-2026-586VVD-OSM-2026-711MAL-2026-1583MAL-2026-2015GHSA-7fr9-gw6v-q3mwMAL-2026-1944VVD-OSM-2026-127MAL-2026-2055VVD-OSM-2026-551VVD-OSM-2026-33VVD-OSM-2026-200VVD-OSM-2026-82VVD-OSM-2026-22VVD-OSM-2026-724VVD-OSM-2026-1MAL-2026-2127GHSA-7qv7-jx74-qhx9VVD-OSM-2026-68VVD-OSM-2026-34VVD-OSM-2026-610VVD-OSM-2026-65VVD-OSM-2026-143GHSA-x24f-q36q-6pcjGHSA-5w92-jfv8-ppvxMAL-2026-2153MAL-2026-2087VVD-OSM-2026-243VVD-OSM-2026-141VVD-OSM-2026-86VVD-OSM-2026-730GHSA-w977-mj56-jpc7MAL-2026-2095VVD-OSM-2026-611VVD-OSM-2026-230GHSA-r8j3-m86x-q66xVVD-OSM-2026-658MAL-2026-1226VVD-OSM-2026-629VVD-OSM-2026-159MAL-2026-1285GHSA-7hf8-rm28-2rm8VVD-OSM-2026-53VVD-OSM-2026-651GHSA-f6jh-hc8p-xpfxVVD-OSM-2026-8MAL-2026-1982GHSA-x2c8-m9xp-3qmvGHSA-j74c-w64f-9wg5VVD-OSM-2026-218VVD-OSM-2026-660VVD-OSM-2026-618MAL-2026-2092GHSA-h95x-pph2-h496MAL-2026-1090VVD-OSM-2026-533VVD-OSM-2026-197MAL-2026-2197VVD-OSM-2026-97GHSA-wcrr-xhm3-j3x9VVD-OSM-2026-266GHSA-gfm3-3p4f-m57wMAL-2026-2003MAL-2026-2179VVD-OSM-2026-136VVD-OSM-2026-262VVD-OSM-2026-580VVD-OSM-2026-665VVD-OSM-2026-78MAL-2026-1064GHSA-82fx-cjgq-fc8vVVD-OSM-2026-679MAL-2026-1018VVD-OSM-2026-14MAL-2026-1432MAL-2026-1577VVD-OSM-2026-678VVD-OSM-2026-642MAL-2026-1570VVD-OSM-2026-206VVD-OSM-2026-87MAL-2026-1284GHSA-fr84-v3mx-mr9xVVD-OSM-2026-553VVD-OSM-2026-685MAL-2026-2203VVD-OSM-2026-60GHSA-f8qc-h6gw-x2vmGHSA-8f57-hh49-gmqfMAL-2026-1225VVD-OSM-2026-708MAL-2026-2001GHSA-c5x7-f6qj-gc77MAL-2026-1952VVD-OSM-2026-267MAL-2026-1479GHSA-p427-hrfp-pc52VVD-OSM-2026-207GHSA-gmvg-736c-7g9fVVD-OSM-2026-566VVD-OSM-2026-180VVD-OSM-2026-240MAL-2026-2061VVD-OSM-2026-56VVD-OSM-2026-560VVD-OSM-2026-229MAL-2026-1275MAL-2026-2226VVD-OSM-2026-146GHSA-2273-pvh3-9x6jVVD-OSM-2026-99MAL-2026-2235GHSA-9m98-jvf5-jxx5VVD-OSM-2026-269MAL-2026-1280VVD-OSM-2026-165MAL-2026-2096MAL-2026-1560MAL-2026-2242MAL-2026-1557MAL-2026-1945MAL-2026-1084GHSA-vf6p-p33f-3cjvGHSA-4g9r-2x44-gfm4VVD-OSM-2026-714VVD-OSM-2026-635VVD-OSM-2026-537MAL-2026-1480VVD-OSM-2026-239MAL-2026-2075VVD-OSM-2026-12VVD-OSM-2026-727VVD-OSM-2026-732MAL-2026-1089VVD-OSM-2026-272VVD-OSM-2026-121GHSA-c39r-4xjc-wrcvVVD-OSM-2026-649VVD-OSM-2026-696VVD-OSM-2026-17VVD-OSM-2026-41GHSA-h29v-mffh-vf54VVD-OSM-2026-661GHSA-f46r-3xg5-w2wmGHSA-x8xx-3mj7-337xVVD-OSM-2026-220VVD-OSM-2026-689VVD-OSM-2026-575VVD-OSM-2026-663VVD-OSM-2026-117GHSA-3fjh-jjvh-r58hGHSA-25q2-f9vw-3hf3MAL-2026-2191MAL-2026-2164VVD-OSM-2026-120VVD-OSM-2026-157GHSA-fr9v-hm5m-rv52VVD-OSM-2026-674VVD-OSM-2026-640VVD-OSM-2026-552VVD-OSM-2026-692MAL-2026-2160MAL-2026-1438MAL-2026-2060VVD-OSM-2026-171GHSA-gphq-fq72-qxwrVVD-OSM-2026-570MAL-2026-2220GHSA-7w6q-gfxv-393vMAL-2026-1580GHSA-8m7g-rpw2-w26vVVD-OSM-2026-133GHSA-34h2-gr5g-vc3jVVD-OSM-2026-682VVD-OSM-2026-542VVD-OSM-2026-233VVD-OSM-2026-545VVD-OSM-2026-694VVD-OSM-2026-55GHSA-3j5q-xvjq-rqxqVVD-OSM-2026-92MAL-2026-1581VVD-OSM-2026-242VVD-OSM-2026-641MAL-2026-1926MAL-2026-2074MAL-2026-1529VVD-OSM-2026-227MAL-2026-2194GHSA-cp44-cvhx-wf33VVD-OSM-2026-212VVD-OSM-2026-235VVD-OSM-2026-590VVD-OSM-2026-129VVD-OSM-2026-729MAL-2026-2166VVD-OSM-2026-244VVD-OSM-2026-717MAL-2026-2204VVD-OSM-2026-691VVD-OSM-2026-648MAL-2026-1283VVD-OSM-2026-615VVD-OSM-2026-94MAL-2026-1291VVD-OSM-2026-45GHSA-38c4-cmg5-vpvcMAL-2026-1987VVD-OSM-2026-125VVD-OSM-2026-88VVD-OSM-2026-2GHSA-j4p4-x5rc-96xxMAL-2026-2094MAL-2026-1276VVD-OSM-2026-699GHSA-g4q9-p378-mc3gMAL-2026-1436MAL-2026-1262VVD-OSM-2026-59VVD-OSM-2026-596VVD-OSM-2026-555VVD-OSM-2026-149MAL-2026-2097GHSA-rm67-f2rf-9fwfVVD-OSM-2026-634GHSA-fp44-gpc5-cc43MAL-2026-2019GHSA-9xfj-83q4-hxj6MAL-2026-1950VVD-OSM-2026-581GHSA-9jg5-g7r5-p9f9VVD-OSM-2026-254GHSA-5g7h-cvvx-x96cVVD-OSM-2026-124GHSA-39vv-2g62-pp83VVD-OSM-2026-539VVD-OSM-2026-104MAL-2026-1498MAL-2026-1975MAL-2026-2048VVD-OSM-2026-215VVD-OSM-2026-578GHSA-74r2-ggvc-h778MAL-2026-1579MAL-2026-2236MAL-2026-2225MAL-2026-1985GHSA-hmv2-22ff-cxh8VVD-OSM-2026-30GHSA-r27q-f5jw-j5jpVVD-OSM-2026-163VVD-OSM-2026-237MAL-2026-1351GHSA-69cx-hr8r-mc9jVVD-OSM-2026-205VVD-OSM-2026-705VVD-OSM-2026-704VVD-OSM-2026-7VVD-OSM-2026-701GHSA-6jrx-v84r-9g5mVVD-OSM-2026-113MAL-2026-1342MAL-2026-1029VVD-OSM-2026-667VVD-OSM-2026-190VVD-OSM-2026-579MAL-2026-1035VVD-OSM-2026-255VVD-OSM-2026-49VVD-OSM-2026-572MAL-2026-1143VVD-OSM-2026-613MAL-2026-2111VVD-OSM-2026-216VVD-OSM-2026-196MAL-2026-1976VVD-OSM-2026-152VVD-OSM-2026-556MAL-2026-1562MAL-2026-1533VVD-OSM-2026-721MAL-2026-1499GHSA-58m2-f8rc-wwq2MAL-2026-1569MAL-2026-2169VVD-OSM-2026-680VVD-OSM-2026-21MAL-2026-1099VVD-OSM-2026-40MAL-2026-2100GHSA-f582-qpjg-gx9hVVD-OSM-2026-111MAL-2026-1955GHSA-2phg-9x97-9759VVD-OSM-2026-591MAL-2026-1048MAL-2026-1573MAL-2026-2018VVD-OSM-2026-541MAL-2026-2126VVD-OSM-2026-688GHSA-2rjv-fxjc-xwmvVVD-OSM-2026-204VVD-OSM-2026-666VVD-OSM-2026-698GHSA-4gc2-gg24-6qf6MAL-2026-1939MAL-2026-1407MAL-2026-1564VVD-OSM-2026-259VVD-OSM-2026-77MAL-2026-1578MAL-2026-1973VVD-OSM-2026-598MAL-2026-1962VVD-OSM-2026-538VVD-OSM-2026-557VVD-OSM-2026-145VVD-OSM-2026-110MAL-2026-2190MAL-2026-2185VVD-OSM-2026-614VVD-OSM-2026-84GHSA-q93m-663h-q987GHSA-95h8-q9jh-jjwfGHSA-52w3-g4x3-xw3hGHSA-9mp5-2jp4-wmwwVVD-OSM-2026-19VVD-OSM-2026-43GHSA-28w8-cpp5-g448MAL-2026-2093MAL-2026-2080MAL-2026-2193MAL-2026-1996VVD-OSM-2026-577VVD-OSM-2026-671VVD-OSM-2026-202VVD-OSM-2026-644VVD-OSM-2026-252MAL-2026-2192MAL-2026-2188GHSA-7xpm-vmrr-4rrvGHSA-8cpf-9rj8-q68mVVD-OSM-2026-621MAL-2026-2234MAL-2026-1080VVD-OSM-2026-594VVD-OSM-2026-128GHSA-j836-pcqv-w9c9VVD-OSM-2026-160GHSA-7fpm-p46r-h37gMAL-2026-1224VVD-OSM-2026-695MAL-2026-2005VVD-OSM-2026-728VVD-OSM-2026-624MAL-2026-1584VVD-OSM-2026-144GHSA-pjwm-q9hh-23wjGHSA-887f-wrq6-j685VVD-OSM-2026-221VVD-OSM-2026-179GHSA-vpx7-g2h6-rq6cGHSA-6mrh-fqgr-9x68VVD-OSM-2026-156MAL-2026-1289VVD-OSM-2026-565VVD-OSM-2026-162VVD-OSM-2026-246VVD-OSM-2026-639VVD-OSM-2026-32GHSA-wp6r-9m2x-4h55VVD-OSM-2026-234VVD-OSM-2026-664VVD-OSM-2026-57MAL-2026-1934VVD-OSM-2026-70MAL-2026-2241MAL-2026-2219GHSA-mvrx-3fqg-4hvhVVD-OSM-2026-258VVD-OSM-2026-257GHSA-jmx7-4g26-qp86MAL-2026-1964GHSA-mrwh-gr28-36wvVVD-OSM-2026-681VVD-OSM-2026-702VVD-OSM-2026-595MAL-2026-1958VVD-OSM-2026-720VVD-OSM-2026-140VVD-OSM-2026-265MAL-2026-2200MAL-2026-1240MAL-2026-2174MAL-2026-2240MAL-2026-1412MAL-2026-1953VVD-OSM-2026-193MAL-2026-1959GHSA-pjxj-7mxh-9348GHSA-5q3v-cjxm-6cgmGHSA-xmfj-5j3f-gx7xMAL-2026-1971GHSA-w5g4-m76j-qxg7VVD-OSM-2026-153VVD-OSM-2026-563MAL-2026-2157MAL-2026-1559MAL-2026-1965GHSA-mqvj-42pf-qv58MAL-2026-1049MAL-2026-2091MAL-2026-2002VVD-OSM-2026-175VVD-OSM-2026-713GHSA-xq57-xcgm-9q8qVVD-OSM-2026-697GHSA-p2f8-jq4c-jj37GHSA-42g4-g458-9wx9VVD-OSM-2026-108VVD-OSM-2026-130MAL-2026-1941MAL-2026-1019VVD-OSM-2026-177MAL-2026-2187GHSA-52hw-wvx9-x8pqMAL-2026-1990GHSA-8g7v-w2f5-7gw2GHSA-7x8p-2g3v-pwqpVVD-OSM-2026-31MAL-2026-1538VVD-OSM-2026-106GHSA-mg5x-ww4x-j322MAL-2026-1496VVD-OSM-2026-627VVD-OSM-2026-172MAL-2026-1296MAL-2026-1966VVD-OSM-2026-46MAL-2026-2040VVD-OSM-2026-174VVD-OSM-2026-643VVD-OSM-2026-709MAL-2026-1970MAL-2026-2165VVD-OSM-2026-630VVD-OSM-2026-548MAL-2026-2008MAL-2026-2163MAL-2026-1279VVD-OSM-2026-102MAL-2026-1085VVD-OSM-2026-186MAL-2026-2007VVD-OSM-2026-573MAL-2026-2090MAL-2026-2073VVD-OSM-2026-603MAL-2026-1422MAL-2026-2062GHSA-4p9p-g69r-jxv8MAL-2026-1972VVD-OSM-2026-115VVD-OSM-2026-198VVD-OSM-2026-264VVD-OSM-2026-9GHSA-mwq7-2fm8-vc4qVVD-OSM-2026-142VVD-OSM-2026-260VVD-OSM-2026-20GHSA-44fq-5mh8-r5hgVVD-OSM-2026-719GHSA-x49c-wrwr-8p2qMAL-2026-1235MAL-2026-2178VVD-OSM-2026-585VVD-OSM-2026-669VVD-OSM-2026-10GHSA-gv85-mrvr-pgchVVD-OSM-2026-95MAL-2026-1530VVD-OSM-2026-670VVD-OSM-2026-199GHSA-m7hw-fgmf-jwhrGHSA-r6f4-p397-5xrjGHSA-7r3j-rgcw-3jgqVVD-OSM-2026-574GHSA-2prc-m9c3-jgwpGHSA-4h33-vfc6-f2hhVVD-OSM-2026-47GHSA-vrqq-pxvj-f2mgMAL-2026-2218VVD-OSM-2026-219GHSA-hfhc-gmgj-9v7vMAL-2026-1044MAL-2026-2233VVD-OSM-2026-211VVD-OSM-2026-181VVD-OSM-2026-223MAL-2026-1983GHSA-5xq6-c5wc-f6x9GHSA-82f5-93r9-hhwqVVD-OSM-2026-657VVD-OSM-2026-677VVD-OSM-2026-119VVD-OSM-2026-158VVD-OSM-2026-707MAL-2026-1561VVD-OSM-2026-225VVD-OSM-2026-51VVD-OSM-2026-706VVD-OSM-2026-249VVD-OSM-2026-222MAL-2026-1088MAL-2026-2081MAL-2026-1521VVD-OSM-2026-226VVD-OSM-2026-715MAL-2026-1961VVD-OSM-2026-647GHSA-hqj8-x2vp-mrp9MAL-2026-2105VVD-OSM-2026-726MAL-2026-2102GHSA-qxf6-x9c5-qxr4MAL-2026-1998VVD-OSM-2026-718GHSA-9php-8vxv-7gmxGHSA-fppj-8rcf-8fppVVD-OSM-2026-187MAL-2026-2079MAL-2026-1261MAL-2026-2228VVD-OSM-2026-192MAL-2026-1406MAL-2026-2246VVD-OSM-2026-622MAL-2026-1286MAL-2026-1969VVD-OSM-2026-602MAL-2026-1931GHSA-f6pq-884h-rjxqVVD-OSM-2026-250MAL-2026-2198VVD-OSM-2026-722VVD-OSM-2026-652MAL-2026-1431MAL-2026-1222MAL-2026-1091VVD-OSM-2026-561GHSA-6rj6-xwm6-v698GHSA-m6hv-9gh4-4c85GHSA-8w5j-p4jv-8rmqMAL-2026-1567VVD-OSM-2026-182GHSA-7qgj-3cfq-g4g4MAL-2026-1582GHSA-4xcw-mhqm-x332VVD-OSM-2026-135VVD-OSM-2026-168VVD-OSM-2026-89VVD-OSM-2026-637VVD-OSM-2026-178MAL-2026-2167VVD-OSM-2026-131VVD-OSM-2026-73MAL-2026-1325VVD-OSM-2026-3GHSA-6jcw-rcqg-wmmfMAL-2026-1409VVD-OSM-2026-620VVD-OSM-2026-63GHSA-fm43-2f72-p329VVD-OSM-2026-101MAL-2026-1098VVD-OSM-2026-62VVD-OSM-2026-672MAL-2026-1097GHSA-9674-vwjj-qxjpVVD-OSM-2026-710VVD-OSM-2026-543MAL-2026-2186MAL-2026-2132MAL-2026-1942MAL-2026-1949GHSA-rjc8-xw63-3j4jMAL-2026-1968VVD-OSM-2026-173VVD-OSM-2026-599MAL-2026-2189MAL-2026-2011VVD-OSM-2026-654VVD-OSM-2026-164VVD-OSM-2026-723VVD-OSM-2026-546MAL-2026-1350GHSA-8vmq-w85q-4q4jMAL-2026-2086MAL-2026-1140MAL-2026-1290MAL-2026-1086MAL-2026-1565MAL-2026-2032VVD-OSM-2026-83MAL-2026-1139GHSA-h2h6-q29m-3mm3VVD-OSM-2026-67MAL-2026-1938MAL-2026-1241VVD-OSM-2026-27VVD-OSM-2026-37GHSA-76ph-2x99-486xGHSA-hqf3-9jfp-qgh9GHSA-9cwp-m29q-hmgrVVD-OSM-2026-589VVD-OSM-2026-48VVD-OSM-2026-107MAL-2026-2037MAL-2026-1956VVD-OSM-2026-606VVD-OSM-2026-24MAL-2026-2130MAL-2026-1937VVD-OSM-2026-139GHSA-r23r-8c7q-wm92MAL-2026-2196VVD-OSM-2026-36VVD-OSM-2026-170VVD-OSM-2026-247MAL-2026-2099GHSA-hpqp-f9r8-f725MAL-2026-2136VVD-OSM-2026-676VVD-OSM-2026-632GHSA-3qf9-476p-8j7fMAL-2026-1488VVD-OSM-2026-646MAL-2026-2155VVD-OSM-2026-116VVD-OSM-2026-608VVD-OSM-2026-184GHSA-wwjg-c6fp-6648VVD-OSM-2026-25MAL-2026-1951GHSA-3m3c-wc3h-m5mrGHSA-69jj-c93h-67p2VVD-OSM-2026-42MAL-2026-2089GHSA-24fv-r862-wg4cMAL-2026-1136MAL-2026-2199VVD-OSM-2026-270MAL-2026-1138VVD-OSM-2026-609VVD-OSM-2026-536MAL-2026-1997VVD-OSM-2026-245VVD-OSM-2026-148GHSA-x6m2-63j5-v6c7GHSA-jfqc-55rq-mm3jVVD-OSM-2026-118MAL-2026-1482VVD-OSM-2026-668MAL-2026-1568MAL-2026-2077MAL-2026-1575GHSA-jvrr-w8mr-28hpMAL-2026-1092VVD-OSM-2026-588MAL-2026-2184MAL-2026-1277MAL-2026-1940MAL-2026-1981GHSA-p7pv-mfpq-4rfgGHSA-2gfq-7ff6-3mr7MAL-2026-1954VVD-OSM-2026-176VVD-OSM-2026-547MAL-2026-1294GHSA-5g2c-h3r8-6w3gVVD-OSM-2026-72VVD-OSM-2026-105VVD-OSM-2026-656VVD-OSM-2026-44VVD-OSM-2026-619MAL-2026-2134GHSA-jffg-8cwf-786hVVD-OSM-2026-583MAL-2026-1288VVD-OSM-2026-155MAL-2026-1281GHSA-86xp-4fvm-qm2pGHSA-wv5m-jqq3-c22xVVD-OSM-2026-28VVD-OSM-2026-584VVD-OSM-2026-123MAL-2026-1977MAL-2026-2063GHSA-53rc-g3gw-946rMAL-2026-2135MAL-2026-1411GHSA-3qmv-2h4m-5qg9MAL-2026-2053VVD-OSM-2026-137MAL-2026-1979VVD-OSM-2026-75GHSA-jrpm-f5xg-3frjVVD-OSM-2026-61MAL-2026-1960MAL-2026-2181GHSA-4wgw-h2cc-rpv6VVD-OSM-2026-592VVD-OSM-2026-169VVD-OSM-2026-100GHSA-3hr5-9jhx-97c5VVD-OSM-2026-263VVD-OSM-2026-653VVD-OSM-2026-662MAL-2026-2082VVD-OSM-2026-616MAL-2026-2125GHSA-87mp-vrm9-h8r5VVD-OSM-2026-69VVD-OSM-2026-80VVD-OSM-2026-4GHSA-jq28-7779-5hp9MAL-2026-1435MAL-2026-1378VVD-OSM-2026-98GHSA-mgm3-4q53-38p5MAL-2026-2247VVD-OSM-2026-684MAL-2026-2156MAL-2026-1544GHSA-vvwp-x2vx-wxpfVVD-OSM-2026-248MAL-2026-1980MAL-2026-1142MAL-2026-1278VVD-OSM-2026-189VVD-OSM-2026-562VVD-OSM-2026-194MAL-2026-2133MAL-2026-2216MAL-2026-2128MAL-2026-2161VVD-OSM-2026-167VVD-OSM-2026-96MAL-2026-1566GHSA-hqvw-49vr-fpw3GHSA-q4j2-j63f-5vqxVVD-OSM-2026-52MAL-2026-2162MAL-2026-2076MAL-2026-1223GHSA-c93f-8832-92qwGHSA-q46m-r8wj-v4p9MAL-2026-2223VVD-OSM-2026-217VVD-OSM-2026-232GHSA-8328-7r2v-2fq6MAL-2026-2224VVD-OSM-2026-605VVD-OSM-2026-58VVD-OSM-2026-138VVD-OSM-2026-150MAL-2026-2129VVD-OSM-2026-550VVD-OSM-2026-103GHSA-5w5v-cvxh-55vqGHSA-fgvm-3g6v-ppjfVVD-OSM-2026-604VVD-OSM-2026-540MAL-2026-1957MAL-2026-1543VVD-OSM-2026-213MAL-2026-1341MAL-2026-2229VVD-OSM-2026-693GHSA-hc54-whg7-r7g2VVD-OSM-2026-645MAL-2026-1978VVD-OSM-2026-725VVD-OSM-2026-636GHSA-64p5-3wp7-v4c9VVD-OSM-2026-13VVD-OSM-2026-559VVD-OSM-2026-132MAL-2026-1974VVD-OSM-2026-587GHSA-r6qh-rm6v-7pvxVVD-OSM-2026-271MAL-2026-1948VVD-OSM-2026-675VVD-OSM-2026-673VVD-OSM-2026-544MAL-2026-2009GHSA-px82-m72x-rpj7MAL-2026-1410MAL-2026-1433VVD-OSM-2026-569VVD-OSM-2026-582MAL-2026-1437VVD-OSM-2026-231GHSA-767f-p685-mw32GHSA-6w26-75vp-gf97MAL-2026-2006VVD-OSM-2026-201GHSA-f8cx-966c-8x2hVVD-OSM-2026-655VVD-OSM-2026-39VVD-OSM-2026-623VVD-OSM-2026-224MAL-2026-2154VVD-OSM-2026-687MAL-2026-2159VVD-OSM-2026-659VVD-OSM-2026-238VVD-OSM-2026-85VVD-OSM-2026-71MAL-2026-1141MAL-2026-2101MAL-2026-2098MAL-2026-1563GHSA-cqxq-2582-f357VVD-OSM-2026-716GHSA-gmxq-2g92-63xvGHSA-jhvp-qr9c-qg9pVVD-OSM-2026-74VVD-OSM-2026-686VVD-OSM-2026-203MAL-2026-1339VVD-OSM-2026-626VVD-OSM-2026-151VVD-OSM-2026-91MAL-2026-1995GHSA-6w74-x38v-9ffjMAL-2026-1295GHSA-cxvr-pcxc-6r58VVD-OSM-2026-185GHSA-347h-frw7-j9f5MAL-2026-2123VVD-OSM-2026-703GHSA-6vcv-6xjg-jm7wVVD-OSM-2026-81GHSA-pjmv-p8w4-fjq5VVD-OSM-2026-261GHSA-7g9x-834j-4788VVD-OSM-2026-209VVD-OSM-2026-628VVD-OSM-2026-76VVD-OSM-2026-612MAL-2026-1287MAL-2026-2206VVD-OSM-2026-554MAL-2026-1340MAL-2026-2010GHSA-7v3c-wxfg-x5fgMAL-2026-1082MAL-2026-2085VVD-OSM-2026-597MAL-2026-1932VVD-OSM-2026-576VVD-OSM-2026-625MAL-2026-1523VVD-OSM-2026-15VVD-OSM-2026-228MAL-2026-1986MAL-2026-2168GHSA-cv8h-5j9m-x3rcVVD-OSM-2026-607VVD-OSM-2026-11GHSA-9wmg-m3mr-xx93MAL-2026-2207MAL-2026-1943VVD-OSM-2026-268GHSA-r54j-4cj8-jf2vMAL-2026-2088MAL-2026-1925VVD-OSM-2026-568VVD-OSM-2026-23VVD-OSM-2026-214VVD-OSM-2026-166GHSA-xpmv-42gw-w7wcMAL-2026-2248VVD-OSM-2026-114VVD-OSM-2026-210VVD-OSM-2026-93MAL-2026-2047VVD-OSM-2026-154MAL-2026-2064VVD-OSM-2026-617MAL-2026-2244VVD-OSM-2026-54VVD-OSM-2026-38VVD-OSM-2026-683VVD-OSM-2026-29VVD-OSM-2026-79VVD-OSM-2026-147VVD-OSM-2026-564VVD-OSM-2026-6MAL-2026-1527MAL-2026-2245VVD-OSM-2026-593VVD-OSM-2026-690MAL-2026-1371VVD-OSM-2026-126MAL-2026-1434VVD-OSM-2026-600MAL-2026-1935MAL-2026-2195VVD-OSM-2026-26VVD-OSM-2026-183MAL-2026-1517MAL-2026-2221VVD-OSM-2026-195MAL-2026-2217MAL-2026-1524VVD-OSM-2026-558GHSA-xqxf-c9jr-8wx6GHSA-f9m8-w27f-mxr3VVD-OSM-2026-601VVD-OSM-2026-5MAL-2026-2131MAL-2026-1988VVD-OSM-2026-50VVD-OSM-2026-567MAL-2026-2239VVD-OSM-2026-633MAL-2026-1946VVD-OSM-2026-208GHSA-2rj8-6crh-98qqGHSA-wgjr-2vhj-qwv7VVD-OSM-2026-109VVD-OSM-2026-122VVD-OSM-2026-134GHSA-jcwx-28x8-jf6fGHSA-p885-4m86-h35rMAL-2026-2222VVD-OSM-2026-66MAL-2026-2000VVD-OSM-2026-571VVD-OSM-2026-236MAL-2026-1572GHSA-36wg-c889-h26jGHSA-qw8c-w97q-7p7p

References

Malicious pypi package: python-module-installer
advisory
advisory
vendor

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›