PyPI/openai-mcp: unknown
Malicious code in openai-mcp (PyPI)
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1072
- https://inspector.pypi.io/project/openai-mcp/2.41.2/packages/94/a6/2d9553e706b0c5e1df6aa5a30059532c112a87f5f858584abcc45816604c/openai_mcp-2.41.2-py3-none-any.whl/openai_mcp-setup.pth
- https://www.endorlabs.com/learn/shai-hulud-hades-wave-hits-six-pypi-bioinformatics-packages
- https://www.stepsecurity.io/blog/the-hades-campaign-pypi-packages
published · modified · JSON