VYPR
← All malware advisories

pypi · Malicious package advisory

Malware

sympy-dev

MAL-2026-450

Malicious code in sympy-dev (PyPI)

Details

Package downloads and executes code from remote servers, indicating malicious behavior. Multiple files and IPs involved. Package impersonates popular sympy package.

Compromised versions (4)

  • 1.2.3
  • 1.2.4
  • 1.2.5
  • 1.2.6

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.