MAL-2026-1894

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/async-substrate-interface-sub/MAL-2026-1894.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2026-1894

Published

2026-03-18T12:11:16Z

Modified

2026-03-19T12:50:32.813762Z

Summary

Malicious code in async-substrate-interface-sub (PyPI)

Details

-= Per source details. Do not edit below this line.=-

Database specific

{
    "malicious-packages-origins": [
        {
            "source": "reversing-labs",
            "id": "RLMA-2026-00086",
            "modified_time": "2026-03-18T12:11:16Z",
            "sha256": "f36f43ffef4fd6a748e240fa6b8d918bc80077fa10ec83ec03310c67edba002d",
            "versions": [
                "1.5.156",
                "1.5.157"
            ],
            "import_time": "2026-03-19T12:18:15.576190855Z"
        }
    ]
}

References

Credits

- ReversingLabs - FINDER
- - https://www.reversinglabs.com

Affected packages

PyPI / async-substrate-interface-sub

Package

Name: async-substrate-interface-sub; View open source insights on deps.dev
Purl: pkg:pypi/async-substrate-interface-sub

Affected ranges

Affected versions

1.*

1.5.156

1.5.157

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/async-substrate-interface-sub/MAL-2026-1894.json"