MAL-2025-6794

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/num2words/MAL-2025-6794.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-6794

Aliases

Published

2025-07-31T19:33:29Z

Modified

2026-07-23T07:53:03.562857918Z

Summary

Malicious code in num2words (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Source: ghsa-malware (23a528edd10eb63e7c7932830fdb314983cadc840ce8ccfbaa04ad821bbdc1da)

The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions have been removed from PyPI, and users are advised to remove the affected versions from their environments.

Source: google-open-source-security (36822c42f7e862f29cef9734efec9a9a9cc44a80e619e954dd25c12239d15767)

The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code.

Database specific

{
    "malicious-packages-origins": [
        {
            "source": "google-open-source-security",
            "versions": [
                "0.5.15",
                "0.5.16"
            ],
            "modified_time": "2025-08-06T01:01:03Z",
            "import_time": "2025-08-06T01:07:01.055679Z",
            "sha256": "36822c42f7e862f29cef9734efec9a9a9cc44a80e619e954dd25c12239d15767"
        },
        {
            "modified_time": "2026-07-21T17:23:21Z",
            "ranges": [
                {
                    "events": [
                        {
                            "introduced": "0.5.15"
                        },
                        {
                            "last_affected": "0.5.16"
                        }
                    ],
                    "type": "ECOSYSTEM"
                }
            ],
            "source": "ghsa-malware",
            "versions": [
                "0.5.16",
                "0.5.15"
            ],
            "sha256": "23a528edd10eb63e7c7932830fdb314983cadc840ce8ccfbaa04ad821bbdc1da",
            "import_time": "2026-07-22T03:44:29.053827259Z",
            "id": "GHSA-jxr6-qrxx-2ph2"
        }
    ]
}

References

Affected packages

PyPI / num2words

Package

Name: num2words; View open source insights on deps.dev
Purl: pkg:pypi/num2words

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0.5.15

Last affected

0.5.16

Affected versions

0.*

0.5.15

0.5.16

Database specific

cwes

[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/num2words/MAL-2025-6794.json"