MAL-2026-2201

    Dashboard / Malicious Package / MAL-2026-2201

    MAL-2026-2201

    Published: 24 Mar 2026Last Modified: 25 Mar 2026

    Summary: Malicious code in privaton-beacon-img-8f3603448690bdde-png (PyPI)

    Details: Source: oracle-using-macaron (be565465ab48d5cf9d07625d2414c21814f63826ea9325c35dca838e40aa24e9) This package is an install-time-executable sdist that uses setup.py paired with an opaque data.bin payload and a beacon name.

    References:

    Affected packages

    Package

    Name: privaton-beacon-img-8f3603448690bdde-png

    Purl: pkg:pypi/privaton-beacon-img-8f3603448690bdde-png

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    774.350.288
    MAL-2026-2201 | CVE-DB