PyPI/magique: unknown
Malicious code in magique (PyPI)
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-592
- https://inspector.pypi.io/project/magique/0.6.9/packages/fb/cf/376a097f8893ac5c63e3d067b233bf16de9e3c980d8da0ac887a5619b297/magique-0.6.9-py3-none-any.whl//magique-setup.pth
- https://www.endorlabs.com/learn/shai-hulud-hades-wave-hits-six-pypi-bioinformatics-packages
- https://www.stepsecurity.io/blog/the-hades-campaign-pypi-pack
published · modified · JSON