Product
xinference
- First Reported
- Apr 22, 2026
- Latest Reported
- Apr 22, 2026
Reported Context (1)
- On April 22, 2026, three consecutive releases of xinference on PyPI — versions 2.6.0, 2.6.1, and 2.6.2 — were confirmed to carry a two-stage credential-stealing payload injected directly into xinference/__init__.py. The Malicious xinference PyPI Releases Steal Credentials on Import
Threat Actors (1)
MITRE ATT&CK (14)
Products (1)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.