MAL-2025-47458

    Dashboard / Malicious Package / MAL-2025-47458

    MAL-2025-47458

    Published: 17 Sept 2025Last Modified: 17 Sept 2025

    Summary: Malicious code in veilcord-tls (PyPI)

    Details: Source: oracle-using-macaron (aed8328880d0c346cc1c0c9d51602617be4ea88a7a23878b68164484949555b2) This package decodes a payload and executes it whenever it is imported. It seems to be targeting veilcord package users. Its contents are almost identical to veilcord, except for the addition of the malicious payload.

    References:

    Affected packages

    Package

    Name: veilcord-tls

    Purl: pkg:pypi/veilcord-tls

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.0.7.5
    0.0.7.6