{"action":"No fix published. Pin and monitor.","affected":[],"component":"magique-ai","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"id":"tcs_01M5KHCAK26BWH0MN22X7QT4GN","modified_at":"2026-07-01T12:45:04.700675390Z","published_at":"2026-06-30T21:06:38Z","references":["https://osv.dev/vulnerability/PYSEC-2026-593","https://inspector.pypi.io/project/magique-ai/0.4.5/packages/33/51/f36b85977bd09b12a88aff94531b608659312497c8856b73353603f11405/magique_ai-0.4.5-py3-none-any.whl//magique_ai-setup.pth","https://www.endorlabs.com/learn/shai-hulud-hades-wave-hits-six-pypi-bioinformatics-packages","https://www.stepsecurity.io/blog/the-hades-campaign-pypi-pack"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-593","url":"https://osv.dev/vulnerability/PYSEC-2026-593"}],"summary":"Malicious code in magique-ai (PyPI)"}