pypi
Maliciousfontcase@0.1.2
Vulnerability report · Last retrieved from osv.dev October 13, 2026 at 11:00 PM UTC
OSV ID
MAL-2026-17862
Ecosystem
pypi
Summary
During import, the package downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-fontcase Reasons (based on the campaign): - infostealer - Downloads and executes a remote executable. - uses-telegram-bot - exfiltration-browser-data - exfiltration-credentials
Source: kam193 (9e2c4992e5295f2b094f3c7c2b2e6c2dbc8d0d9ca6242d58318e6e1b83a4255c)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.