Malicious code in clean-packager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 262c927312d80c4f09dc74bcc93a7036c67a0e3c831d802ce8cbebc21b37e4b5 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-908 Malicious code in code-beautifyer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1aa07cb2a8c34d8fc5a6728b0985541456937811451149748ae9acdef4892e7c During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-947 Malicious code in noway-back (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ddfd888bb0cff1ee81f07dbdfce95081afa43d43a18f8a0417b3724337c2e287 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-909 Malicious code in code-suggester (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e28ce2ce1f759945a6b42ebe9f6f224869ab1f91b85212853e83a20d43a390bd During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in lan-clean (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b77907fa5398dac2959c2fa6cc7ab1c451a318803ca9efb40ea52487080609c3 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in zip-me (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4ae48b0e5e3d93cee49e83f0bfa47a43f02ede60914545d0d82204c6664fde6f During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in code-suggester (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e28ce2ce1f759945a6b42ebe9f6f224869ab1f91b85212853e83a20d43a390bd During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-907 Malicious code in clean-packager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 262c927312d80c4f09dc74bcc93a7036c67a0e3c831d802ce8cbebc21b37e4b5 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-951 Malicious code in presudo-generate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e390060b9c380a6e7c1743dc35278cbe02801d90678046380344edd73673ca54 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

Malicious code in threadfluent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2a72da681aea57683d0d6b134f0263f126dfe205810fdcfa970c9920058fcf15 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...

Malicious code in httpfluent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ad45caa6ad5e9c6f356193dc378e801a9fd3846f04443ad9d6c841b0b2e80c62 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...

Malicious code in websynapse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7323a05444284204de7701ff8b7a738bc155cb22356cf93fc1399dedad5afa46 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...

MAL-2025-1007 Malicious code in websynapse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7323a05444284204de7701ff8b7a738bc155cb22356cf93fc1399dedad5afa46 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...

MAL-2025-994 Malicious code in threadfluent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2a72da681aea57683d0d6b134f0263f126dfe205810fdcfa970c9920058fcf15 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...

MAL-2025-933 Malicious code in httpfluent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ad45caa6ad5e9c6f356193dc378e801a9fd3846f04443ad9d6c841b0b2e80c62 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...

Ultralytics Supply-Chain Attack

Last week, we saw a supply-chain attack against the Ultralytics AI library on GitHub. A quick summary: On December 4, a malicious version 8.3.41 of the popular AI library ultralytics ­--which has almost 60 million downloads--was published to the Python Package Index PyPI package repository. The...

Malicious code in python-bitget-wrapper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 769187e87797e69e9ebfc00eb97274a91fea1c86b1472b4ef6436441f737c8b9 Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...

Malicious code in python-bitget-request (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bf787bcce66ad47046d93086a114a0f144b0f538b3d969fea6aea42b2312f58b Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...

[SECURITY] Fedora 40 Update: python3.9-3.9.21-1.fc40

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

[SECURITY] Fedora 41 Update: python3.9-3.9.21-1.fc41

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...