MAL-2026-450

    Dashboard / Malicious Package / MAL-2026-450

    MAL-2026-450

    Published: 22 Jan 2026Last Modified: 22 Jan 2026

    Summary: Malicious code in sympy-dev (PyPI)

    Details: Package downloads and executes code from remote servers, indicating malicious behavior. Multiple files and IPs involved. Package impersonates popular sympy package.

    References: https://app.safedep.io/community/malysis/01KF6A8XK4K2H7DWE27QVQE6S2

    Affected packages

    Package

    Name: sympy-dev

    Purl: pkg:pypi/sympy-dev

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    1.2.3
    1.2.4
    1.2.5
    1.2.6
    MAL-2026-450 | CVE-DB