MAL-2024-11541 Malicious code in bugbounty (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in artifact-lab-3-package-0c8bce1c (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11524 Malicious code in arielbogo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in akobo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiocpa (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11518 Malicious code in aiocpa (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in afritonpy (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in afriton-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in afriton (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in afrit-name (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 48484efej8id (PyPI)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2024:14565-1 python310-Django4-4.2.17-1.1 on GA media

These are all security issues fixed in the python310-Django4-4.2.17-1.1 package on the GA media of openSUSE Tumbleweed...

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

In yet another software supply chain attack, it has come to light that two versions of a popular Python artificial intelligence AI library named ultralytics were compromised to deliver a cryptocurrency miner. The versions, 8.3.41 and 8.3.42, have since been removed from the Python Package Index...

[SECURITY] Fedora 41 Update: uv-0.5.5-2.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 40 Update: uv-0.5.5-2.fc40

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

openSUSE Security Advisory (SUSE-SU-2024:4194-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in intgraphx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4fb1e216d0815e75bd49620f6176c757576a58b8e4669df0ff803d7a84aad2ba Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-2964 Malicious code in flamepro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53c4ea20a42b8ba4c81e1625a540dbe1eff5fde676d280fb1b1a53d04b7ef069 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in dbsxrchpro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7e904380115b3ea3cfb5766a5e527bb71775c65af3706c2d5392ef3e60d17c5 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in graphicsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f85a722af04dc8f110fe530c6c3de3345ac2cf99b4e315d82cbbf0039c54660 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...