netweavex@1.1.2
Vulnerability report · Last retrieved from osv.dev October 26, 2026 at 4:46 PM UTC
OSV ID
MAL-2026-18328
Ecosystem
pypi
Summary
Clone of a legitimated package. During import package executes obfuscated code that downloads code from a GitHub repository. During analysis, the code was just a placeholder. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-netweavex Reasons (based on the campaign): - clones-real-package - obfuscation - Downloads and executes a remote malicious script. - typosquatting
Source: kam193 (96ae0ec579e95e33c63930792ee782e6229f77547efac35c3894a7e05c8af2ca)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.