Malware Feed Entry Detected 2026-09-18
Detections feed entry — detected by codelake scanners. This package was flagged by our own detection pipeline. The rules that fired and package identifiers are below. Full analysis, timeline and IOCs live on hand-curated advisories at /advisories; this page is the machine-generated receipt for the live detections feed.
Advisory · CLR-2026-99340

[email protected]

Detected by codelake scanners.

Detection details

[email protected] published to pypi, flagged by codelake scanners on 2026-09-18 05:39 UTC.

Detector rules that fired on this package:

  • Source imports a module from a non-literal name — opaque dependency behavior.pystatic.dynamic-import
  • Package ships a private key / certificate file: tests/certs/expired/ca/ca-private.key — secret/credential leak via the registry behavior.shipped.credential-file
  • Package ships a private key / certificate file: tests/certs/expired/server/server.key — secret/credential leak via the registry behavior.shipped.credential-file
  • Package ships a private key / certificate file: tests/certs/expired/server/server.pem — secret/credential leak via the registry behavior.shipped.credential-file
  • Package ships a private key / certificate file: tests/certs/mtls/client/ca/ca-private.key — secret/credential leak via the registry behavior.shipped.credential-file
  • Package ships a private key / certificate file: tests/certs/mtls/client/client.key — secret/credential leak via the registry behavior.shipped.credential-file
  • Package ships a private key / certificate file: tests/certs/mtls/client/client.pem — secret/credential leak via the registry behavior.shipped.credential-file
  • Package ships a private key / certificate file: tests/certs/valid/ca/ca-private.key — secret/credential leak via the registry behavior.shipped.credential-file
  • Package ships a private key / certificate file: tests/certs/valid/server/server.key — secret/credential leak via the registry behavior.shipped.credential-file
  • Package ships a private key / certificate file: tests/certs/valid/server/server.pem — secret/credential leak via the registry behavior.shipped.credential-file

OSV reference: MAL-2026-16274

This is an auto-generated entry in the codelake detections feed. Hand-curated deep case studies live on /advisories.