{"dataType":"CVE_RECORD","dataVersion":"1.0","cveMetadata":{"cveId":"GCVE-110-AUR-2026-005939","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-11-01T20:51:16Z","dateUpdated":"2026-11-01T20:51:16Z","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"en","value":"The Arch User Repository (AUR) package `python-types-pyserial` was flagged as malicious by automated PKGBUILD analysis (3 indicator(s)). Building or installing this package may execute attacker-controlled code. This verdict is produced by static analysis and is subject to human review.","supportingMedia":null},{"lang":"en","value":"[T-DIFF-NEW-SUSPICIOUS] Newly introduced suspicious pattern: P-BASE64 (Base64 decoding (possible payload hiding)) — matched: # Co-maintainer: Tércio Martins \u003cecho dGVyY2lvd2VuZGVsQGdtYWlsLmNvbQo= | base64 -d\u003e","supportingMedia":null},{"lang":"en","value":"[MT-CHANGED-EMAIL] latest commit uses a maintainer/contributor email not present in prior history — matched: tecnotercio@yahoo.com.br","supportingMedia":null},{"lang":"en","value":"[MT-NEW-CONTRIBUTOR] latest commit introduces a contributor absent from prior history — matched: Tércio Martins \u003ctecnotercio@yahoo.com.br\u003e","supportingMedia":null}],"references":[{"url":"https://aur.archlinux.org/packages/python-types-pyserial","name":"","tags":["advisory"]},{"url":"https://pypi.org/project/types_pyserial","name":"","tags":["web"]},{"url":"https://files.pythonhosted.org/packages/73/54/3e46467007f7d5d9f37965c3aed5be4ee09bbb9b9233058c8e4ef4e0d953/types_pyserial-3.5.0.20261030.tar.gz","name":"","tags":["web"]}],"metrics":null,"problemTypes":[{"descriptions":[{"lang":"en","description":"Embedded Malicious Code","cweId":"CWE-506","type":"CWE"}]}],"affected":[{"vendor":"aur","product":"python-types-pyserial","collectionURL":"https://aur.archlinux.org","packageName":"python-types-pyserial","repo":"","defaultStatus":"","versions":[{"version":"3.5.0.20261030-1","status":"affected","versionType":"","lessThan":"","lessThanOrEqual":"","changes":null}],"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null},"adp":null}}