{"id":"MAL-2026-15693","title":"Malicious code in py-devoli-common (PyPI)","summary":"Malicious code in py-devoli-common (PyPI)","severity":"critical","exploited":true,"vendor":"py-devoli-common","product":"py-devoli-common","ecosystem":"pip","affected":["py-devoli-common"],"published":"2026-08-24","updated":"2026-09-09","sourceUpdated":"2026-09-09T03:30:11.119559900Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-15693","references":[{"url":"https://pypi.org/project/py-devoli-common/999.999.999/"}],"tags":["osv","pip","malware"],"ingestedAt":"2026-09-02T19:31:23.907Z","slug":"MAL-2026-15693","body":"## Overview\n\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d)\nThe package was found to contain malicious code or consuming dependency that contains malicious code\n\n\n## Affected packages\n\n- `py-devoli-common`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"abyssal","depthScore":70,"depthScoreParts":{"impact":52.3,"likelihood":0,"exploitation":18,"ransomware":0},"changes":[{"seq":202647,"id":"MAL-2026-15693","ts":1789400124359,"field":"exploited","old":"false","new":"true"},{"seq":202646,"id":"MAL-2026-15693","ts":1789400124359,"field":"severity","old":"none","new":"critical"},{"seq":201374,"id":"MAL-2026-15693","ts":1789397625004,"field":"exploited","old":"true","new":"false"},{"seq":201373,"id":"MAL-2026-15693","ts":1789397625004,"field":"severity","old":"critical","new":"none"},{"seq":200067,"id":"MAL-2026-15693","ts":1789395588338,"field":"exploited","old":"false","new":"true"},{"seq":200066,"id":"MAL-2026-15693","ts":1789395588338,"field":"severity","old":"none","new":"critical"},{"seq":199304,"id":"MAL-2026-15693","ts":1789392266227,"field":"exploited","old":"true","new":"false"},{"seq":199303,"id":"MAL-2026-15693","ts":1789392266227,"field":"severity","old":"critical","new":"none"},{"seq":197637,"id":"MAL-2026-15693","ts":1789384307752,"field":"exploited","old":"false","new":"true"},{"seq":197636,"id":"MAL-2026-15693","ts":1789384307752,"field":"severity","old":"none","new":"critical"},{"seq":196911,"id":"MAL-2026-15693","ts":1789383784885,"field":"exploited","old":"true","new":"false"},{"seq":196910,"id":"MAL-2026-15693","ts":1789383784885,"field":"severity","old":"critical","new":"none"},{"seq":195815,"id":"MAL-2026-15693","ts":1789380596247,"field":"exploited","old":"false","new":"true"},{"seq":195814,"id":"MAL-2026-15693","ts":1789380596247,"field":"severity","old":"none","new":"critical"},{"seq":194766,"id":"MAL-2026-15693","ts":1789378793789,"field":"exploited","old":"true","new":"false"},{"seq":194765,"id":"MAL-2026-15693","ts":1789378793789,"field":"severity","old":"critical","new":"none"},{"seq":193553,"id":"MAL-2026-15693","ts":1789376560911,"field":"exploited","old":"false","new":"true"},{"seq":193552,"id":"MAL-2026-15693","ts":1789376560911,"field":"severity","old":"none","new":"critical"},{"seq":192340,"id":"MAL-2026-15693","ts":1789373644599,"field":"exploited","old":"true","new":"false"},{"seq":192339,"id":"MAL-2026-15693","ts":1789373644599,"field":"severity","old":"critical","new":"none"},{"seq":191125,"id":"MAL-2026-15693","ts":1789369517618,"field":"exploited","old":"false","new":"true"},{"seq":191124,"id":"MAL-2026-15693","ts":1789369517618,"field":"severity","old":"none","new":"critical"},{"seq":189912,"id":"MAL-2026-15693","ts":1789368465640,"field":"exploited","old":"true","new":"false"},{"seq":189911,"id":"MAL-2026-15693","ts":1789368465640,"field":"severity","old":"critical","new":"none"},{"seq":188695,"id":"MAL-2026-15693","ts":1789365251672,"field":"exploited","old":"false","new":"true"},{"seq":188694,"id":"MAL-2026-15693","ts":1789365251672,"field":"severity","old":"none","new":"critical"},{"seq":187482,"id":"MAL-2026-15693","ts":1789363481919,"field":"exploited","old":"true","new":"false"},{"seq":187481,"id":"MAL-2026-15693","ts":1789363481919,"field":"severity","old":"critical","new":"none"},{"seq":186268,"id":"MAL-2026-15693","ts":1789361250288,"field":"exploited","old":"false","new":"true"},{"seq":186267,"id":"MAL-2026-15693","ts":1789361250288,"field":"severity","old":"none","new":"critical"},{"seq":185055,"id":"MAL-2026-15693","ts":1789358407591,"field":"exploited","old":"true","new":"false"},{"seq":185054,"id":"MAL-2026-15693","ts":1789358407591,"field":"severity","old":"critical","new":"none"},{"seq":183304,"id":"MAL-2026-15693","ts":1789354334493,"field":"exploited","old":"false","new":"true"},{"seq":183303,"id":"MAL-2026-15693","ts":1789354334493,"field":"severity","old":"none","new":"critical"},{"seq":182097,"id":"MAL-2026-15693","ts":1789353336944,"field":"exploited","old":"true","new":"false"},{"seq":182096,"id":"MAL-2026-15693","ts":1789353336944,"field":"severity","old":"critical","new":"none"},{"seq":180890,"id":"MAL-2026-15693","ts":1789350308202,"field":"exploited","old":"false","new":"true"},{"seq":180889,"id":"MAL-2026-15693","ts":1789350308202,"field":"severity","old":"none","new":"critical"},{"seq":179683,"id":"MAL-2026-15693","ts":1789348312301,"field":"exploited","old":"true","new":"false"},{"seq":179682,"id":"MAL-2026-15693","ts":1789348312301,"field":"severity","old":"critical","new":"none"},{"seq":178476,"id":"MAL-2026-15693","ts":1789346387768,"field":"exploited","old":"false","new":"true"},{"seq":178475,"id":"MAL-2026-15693","ts":1789346387768,"field":"severity","old":"none","new":"critical"},{"seq":177269,"id":"MAL-2026-15693","ts":1789343192259,"field":"exploited","old":"true","new":"false"},{"seq":177268,"id":"MAL-2026-15693","ts":1789343192259,"field":"severity","old":"critical","new":"none"},{"seq":175386,"id":"MAL-2026-15693","ts":1789334899838,"field":"exploited","old":"false","new":"true"},{"seq":175385,"id":"MAL-2026-15693","ts":1789334899838,"field":"severity","old":"none","new":"critical"},{"seq":174181,"id":"MAL-2026-15693","ts":1789333720584,"field":"exploited","old":"true","new":"false"},{"seq":174180,"id":"MAL-2026-15693","ts":1789333720584,"field":"severity","old":"critical","new":"none"},{"seq":172995,"id":"MAL-2026-15693","ts":1789331109274,"field":"exploited","old":"false","new":"true"},{"seq":172994,"id":"MAL-2026-15693","ts":1789331109274,"field":"severity","old":"none","new":"critical"}]}