PYSEC-2026-1
NoneCVSS
—
EPSS
—
Published
Feb 6, 2026
CISA due date
—
The record
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | dydx-v4-client | 1.1.5.post1 | No fix |