{"id":"MAL-2026-18117","title":"Malicious code in deebug (PyPI)","summary":"Malicious code in deebug (PyPI)","severity":"critical","exploited":true,"vendor":"deebug","product":"deebug","ecosystem":"pip","affected":["deebug"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T23:45:07.211845226Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-18117","references":[{"url":"https://www.virustotal.com/gui/file/e6d96b5500b232bea67f6f9046cfbc22d29a515c42d2af9523a15ebe8a7c4ab7/"},{"url":"https://bad-packages.kam193.eu/pypi/package/deebug"}],"tags":["osv","pip","malware"],"ingestedAt":"2026-10-21T11:54:42.745Z","slug":"MAL-2026-18117","body":"## Overview\n\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: kam193 (db7aff856cffe15877311c77e380d51572713e5eaf35aab77ae51453025a352d)\nDuring installation, package downloads and executes malware.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-semvver\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote executable.\n\n\n - malware\n\n\n - typosquatting\n\n\n## Affected packages\n\n- `deebug`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"abyssal","depthScore":70,"depthScoreParts":{"impact":52.3,"likelihood":0,"exploitation":18,"ransomware":0},"changes":[]}