ftw (>=1.2.3, <=1.2.4), python-dev-tools (2019.6.2) potentially affected by CVE-2025-71176 via pytest (4.6.0)

pytest PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - ftw =1.2.3, =1.2.4 - python-dev-tools 2019.6.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

python-dev-tools (>=2019.8.16, <=2019.8.19), styletransfer (>=0.8.0, <=0.8.2) potentially affected by CVE-2025-71176 via pytest (5.1.0)

pytest PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools =2019.8.16, =0.8.0, =0.8.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

django-clite (>=0.2.11, <=0.3.0), python-dev-tools (>=2019.11.20, <=2019.11.25) +1 more potentially affected by CVE-2025-71176 via pytest (5.3.0)

pytest PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - django-clite =0.2.11, =2019.11.20, =0.1.1, =0.1.3 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

mask-anonymization-framework (>=1.2.0, <=1.3.2), python-dev-tools (2019.8.24) +2 more potentially affected by CVE-2025-71176 via pytest (5.1.1)

pytest PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mask-anonymization-framework =1.2.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

bolinette (>=0.0.12, <=0.0.19), mlbackend (0.0.3) +6 more potentially affected by CVE-2025-71176 via pytest (5.3.1)

pytest PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.0.12, =0.0.2, =1.0.0, =2019.11.27, =0.0.12, =2019.12.13.0, =1.2.1, =1.2.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1...

dialogy (>=0.2.3, <=0.9.20), flexlate-dev (>=0.1.0, <=0.19.0) +2 more potentially affected by CVE-2026-23986 via copier (5.1.0)

copier PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dialogy =0.2.3, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-23986 Source advisory: OSV:PYSEC-2026-1272...

aaz-dev (>=1.0.2, <=2.10.1), adminui (1.5.2) +190 more potentially affected by CVE-2025-66221 via werkzeug (2.1.2)

werkzeug PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aaz-dev =1.0.2, =1.5.2, =0.14.0, =0.0.1a0, =1.5.0, =1.1.1, =2.6.0, =1.0.5, =1.7.1, =1.3.0, =3.1.0, =1.45.0, =1.47.0 and more Source cves:...

bbtext (0.1.0), casparser (0.5.4) +10 more potentially affected by CVE-2025-70559 via pdfminer-six (20211012.0.0)

pdfminer-six PYPI version 20211012.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bbtext 0.1.0 - casparser 0.5.4 - core-dev =0.1.0, =0.9.0, =2.3.0, =12.7.1, =0.5.7, =0.16.0, =1.66.13, =0.1.1, =0.3.1 Source cves:...

bbtext (0.1.0), casparser (0.5.4) +10 more potentially affected by CVE-2025-64512 via pdfminer-six (20211012.0.0)

pdfminer-six PYPI version 20211012.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bbtext 0.1.0 - casparser 0.5.4 - core-dev =0.1.0, =0.9.0, =2.3.0, =12.7.1, =0.5.7, =0.16.0, =1.66.13, =0.1.1, =0.3.1 Source cves:...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2025-8869 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

chalice (>=1.2.3, <=1.6.0), httptesting (>=1.0.1, <=1.0.2) +4 more potentially affected by CVE-2025-8869 via pip (10.0.1)

pip PYPI version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice =1.2.3, =1.0.1, =4.0.0, =4.0.0, =4.0.1 - zerv 0.1.0 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2025-8869 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2025-8869 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2025-8869 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2025-8869 Source advisory: OSV:PYSEC-2026-1795...

Malicious Package

Overview load-nuxt-dev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-6935 Malicious code in load-nuxt-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0f879297070c07197ace88cfb411c61d497ad150e39c2c5c91349737f5d83a The package name resembles the legitimate Nuxt ecosystem tooling e.g., @nuxt/load-nuxt, and the version 99.0.3 is a common dependency-confusion /...

Malicious code in load-nuxt-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0f879297070c07197ace88cfb411c61d497ad150e39c2c5c91349737f5d83a The package name resembles the legitimate Nuxt ecosystem tooling e.g., @nuxt/load-nuxt, and the version 99.0.3 is a common dependency-confusion /...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2026-53877 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2026-48588 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

edc (>=0.3.14, <=0.3.16), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2026-53878 via django (3.1.8)

django PYPI version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.3.14, =0.3.16 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...