Skip to content
OpenAdvisories

Package · PyPI

rlask

1 known vulnerabilities.

Malicious versions reported for this package

  • MAL-2026-5303 — 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7 · Jun 8, 2026
All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    PYSEC-2026-584

    Malicious code in rlask (PyPI)

    Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of rlask were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload (via the Bun runtime) on import that harves…

    rlask PyPI