Malicious Package Affecting nicegui package, versions *
Threat Intelligence
Snyk has reported that there have been attempts or successful attacks targeting this vulnerability.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-NICEGUI-16748145
- published18 May 2026
- disclosed17 May 2026
- creditUnknown
Introduced: 17 May 2026
New Malicious CVE NOT AVAILABLE CWE-506 (opens in a new tab)How to fix?
Avoid using all malicious instances of the nicegui package.
Overview
nicegui is a malicious package. This package contains malicious code designed to steal sensitive credentials and establish remote access. While these packages might attempt to impersonate legitimate organizations and popular open-source libraries, there is no connection between those organizations and these malicious packages.
Note: While not all versions of this package contain a malicious payload, this is considered a staged attack with incremental delivery. Therefore, use of any version of the package should be considered compromised.