{"id":"MAL-2026-15693","kind":"package","aliases":["MAL-2026-15693"],"related":[],"title":"Malicious code in py-devoli-common (PyPI)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d)\nThe package was found to contain malicious code or consuming dependency that contains malicious code","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"py-devoli-common","fixed":[],"affected":"= 999.999.999","ecosystem":"pypi"}],"ecosystems":["pypi"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-08-24T16:13:45+00:00","first_seen_at":"2026-10-26T20:51:56+00:00","triaged_at":"2026-10-26T21:12:36+00:00","updated_at":"2026-10-26T21:12:36+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-15693':11A,14A '-2026':10A,13A '33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d':34C 'amazon':32C 'amazon-inspector':31C 'code':2A,42C,49C 'common':7A,18A 'consum':44C 'contain':40C,47C 'depend':45C 'detail':23C 'devoli':6A,17A 'edit':26C 'found':38C 'inspector':33C 'line':29C 'mal':9A,12A 'malici':1A,19B,41C,48C 'packag':20B,36C 'per':21C 'py':5A,16A 'py-devoli-common':4A,15A 'pypi':8A 'sourc':22C,30C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-08-24T16:13:45+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-15693","url":"https://osv.dev/vulnerability/MAL-2026-15693","severity":"critical","published_at":"2026-08-24T16:13:45+00:00","modified_at":"2026-09-09T03:30:11+00:00","first_seen_at":"2026-10-26T20:51:56+00:00","fetched_at":"2026-10-26T20:51:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}