---
id: MAL-2026-15693
title: Malicious code in py-devoli-common (PyPI)
summary: Malicious code in py-devoli-common (PyPI)
severity: critical
exploited: true
vendor: py-devoli-common
product: py-devoli-common
ecosystem: pip
affected:
  - py-devoli-common
published: '2026-08-24'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T03:30:11.119559900Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/MAL-2026-15693'
references:
  - url: 'https://pypi.org/project/py-devoli-common/999.999.999/'
tags:
  - osv
  - pip
  - malware
ingestedAt: '2026-09-02T19:31:23.907Z'
---

## Overview


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d)
The package was found to contain malicious code or consuming dependency that contains malicious code


## Affected packages

- `py-devoli-common`

## Remediation

Refer to the advisory for the patched release.