MAL-2026-700 Malicious code in tabulapys (PyPI)
- Package
- tabulapys
- Registry
- PyPI
What is MAL-2026-700?
MAL-2026-700 is a malicious package in tabulapys, published on 3 Feb 2026.
Official description
Packages contain hidden code that is effectively run during importing or using the library, and downloads second stage code. Then, a process running in background periodically connects to a remote host and waits for next code to execute
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2025-11-spellcheckers
Reasons (based on the campaign):
obfuscation
Downloads and executes a remote malicious script.
The package contains code to execute remote commands (probably limited to a specific set) on the victim's machine.
What should I do about MAL-2026-700?
Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.