{"action":"No fix published. Pin and monitor.","affected":[],"component":"dydx-v4-client","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"id":"tcs_01M5KGQ098CWFWBN8VKFHJX237","modified_at":"2026-02-06T14:53:23.620543Z","published_at":"2026-01-28T21:09:02Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1","https://inspector.pypi.io/project/dydx-v4-client/1.1.5.post1/packages/4b/06/4d848676e932b0fc9d707bb78603dc76555141cc832819cd1e5077bdf2a2/dydx_v4_client-1.1.5.post1.tar.gz/dydx_v4_client-1.1.5.post1/dydx_v4_client/_bootstrap.py#line.18"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-1","url":"https://osv.dev/vulnerability/PYSEC-2026-1"}],"summary":"A single post-release of dydx-v4-client contained obfuscated multi-stage loader"}