MAL-2026-1003

See a problem?

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/cnnct-eaas-corre/MAL-2026-1003.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-1003

Published

2026-02-23T16:00:12Z

Modified

2026-02-24T07:13:53.407811Z

Summary

Malicious code in cnnct-eaas-corre (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Source: oracle-using-macaron (2111dcd49405f8c078842cf7af9cfe21ddb54f558d66f2949da752d0e62cddd1)

This package appears to be a typo-squatting attempt targeting connect-eaas-core.

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2026-02-23T16:00:12Z",
            "sha256": "2111dcd49405f8c078842cf7af9cfe21ddb54f558d66f2949da752d0e62cddd1",
            "source": "oracle-using-macaron",
            "modified_time": "2026-02-23T16:00:12Z",
            "versions": [
                "1322.0.0"
            ]
        }
    ]
}

References

Credits

- Oracle using Macaron - FINDER
- - https://github.com/oracle/macaron

Affected packages

PyPI / cnnct-eaas-corre

Package

Name: cnnct-eaas-corre; View open source insights on deps.dev
Purl: pkg:pypi/cnnct-eaas-corre

Affected ranges

Affected versions

1322.*

1322.0.0

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/cnnct-eaas-corre/MAL-2026-1003.json"