Versions 0.5.15 and 0.5.16 of num2words were compromised (maintainer account compromise). Other versions are not flagged as malicious.
Maintainer account compromise, verified by a CyberXYZ analyst.
Compromised PyPI maintainer account led to malicious versions being published Jul 2025. Versions 0.5.15 and 0.5.16 removed by PyPI. MAL-2025-* series.
If one of these versions was installed, remove it and treat the credentials, tokens and SSH keys on that machine as exposed: rotate them. Check CI runners and container images that installed it too.
pip install "num2words==0.5.14"
1 direct dependencies
none carry a known advisory
3 published models carry an advisory from this package
3 pin a version the advisory is confirmed against; the rest declare it without a version.
| NbAiLab/nb-wav2vec2-1b-bokmaal-v2 | CRITICAL |
| NbAiLab/nb-wav2vec2-1b-nynorsk | CRITICAL |
3 published models
1 declared · 2 observed · 0 inferred
| Model | Evidence |
|---|---|
| dbdmg/wav2vec2-xls-r-300m-italian | declared |
| NbAiLab/nb-wav2vec2-1b-bokmaal-v2 | observed |
3 published AI models are associated with this package: 1 name it in a requirements or pyproject file, 2 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 0 state a version requirement, so this is not a count of affected models.
severity band, no base score published
chance of exploitation in 30 days
CyberXYZ composite out of 10
fig. 01 — GHSA-jxr6-qrxx-2ph2, the advisory selected below
The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions have been removed from PyPI, and users are advised to remove the affected versions from their environments.
Checked 2026-11-06 at 21:34 UTC. The most recent advisory here was published 2025-07-31. Updated continuously from NVD, GHSA, OSV and CNA feeds.