Logo
pypi

npp-ml@0.1.9

Vulnerability report · Last retrieved from osv.dev October 13, 2026 at 4:57 AM UTC

Malicious

OSV ID

MAL-2026-17847

Ecosystem

pypi

Summary

The package claims to provide a Notepad++ distribution, but in fact delivers ADExplorer, an Active Directory analysis tool. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-npp-ml Reasons (based on the campaign): - other - impersonation

Source: kam193 (7f575d02caf2363703b49c45c7f5ba106b798ee4f5b02f1977b118f2b52ff30e)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.