If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Malicious
MAL-2025-6553
myfuntools
PyPI package · versions 0.1.1, 0.1.2, 0.1.3, 0.1.3.1, 0.1.3.2, 0.1.3.3, 0.1.3.4, 0.1.3.5, 0.1.3.6, 0.1.3.7, 0.1.3.8, 0.1.3.9, 0.1.4, 0.1.5, 0.1.6, 0.1.6.1, 0.1.7, 0.1.8, 0.1.8.1, 0.1.8.2, 0.1.8.3, 0.1.9, 0.1.9.1, 0.1.9.2, 0…
Reported Jul 31, 2025 · Updated Jul 31, 2025