MAL-2026-18327 — Malicious code in zagents-framework (PyPI)
Installing the package or importing the module exfiltrates basic host information such as an IP address or username. The package has no other purpose, and the source describes the risk as limited.
CERT24