MAL-2026-5878None▾ SunlitMalicious code in cache-compat-utils (PyPI)
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
-= Per source details. Do not edit below this line.=-
The package was found to contain malicious code or consuming dependency that contains malicious code
The package contains obfuscated JS code with an infostealer harvesting all kinds of credentials, as well as a worm capable of spreading the infection further.
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-06-cache-compat-utils
Reasons (based on the campaign):
obfuscation
malware
infostealer
exfiltration-credentials
exfiltration-ssh-keys
exfiltration-cloud-tokens
cache-compat-utilsRefer to the advisory for the patched release.