Supply-chain threat intelligence
Risk score
92
Indexed incident for xforpy (pypi).
During import, the package starts a reverse shell
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-06-anthropy
Reasons (based on the campaign):
Affected versions
Indicators
Timeline