vllm-plugins

MAL-2026-844

PyPItyposquat2/10/2026
Description

Malicious code in vllm-plugins (PyPI)

Indicators of Compromise
SHA256 Hashes (1)
4fa0706d497278a502d158c89d51645a6f4e8187ca325aacaa59facccf542a03
References (1)
https://bad-packages.kam193.eu/pypi/package/vllm-pluginsOSV
Details
EcosystemPyPI
Attack Typetyposquat
Published2/10/2026
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001