MAL-2026-5489 Malicious code in bittensor-emission-tracker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5db94f9840938f43eca692c1176b72bbd94a2f86a694c3293853f39b886a2f The package advertises Bittensor subnet burn-rate monitoring but ships a Cython-compiled darwin.so core.cpython-310-darwin.so containing an...

Malicious code in bittensor-burn-alert (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e89dc9ff0a5d334b67a01c572c036b0740adf6d8669d2fa25c241a0c098116 The package advertises itself as a Bittensor subnet burn-rate monitor but bundles a covert clipboard surveillance daemon in its compiled core module...

Malicious code in tcalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 51218378709bfe987aadc08f4c49c00938dd166c52ea0f450de5b7ce9ba1289a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tkcalnedar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3278249ca47f04ae413f07499cdbb1ddb9ea1b2728b08f0dffa7259c44478190 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsou (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx da2062b8d076556b32fa8c5c2755a46634ea891182547b05c2652a565021d825 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifusoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3a6c340d387a9739780a2da49186b1349c0c82073cbe49bf70102e75cb1e55f2 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pycodestylle (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8aa441194124b7b9601ce310afeada571769c6660bb0dae001671fdfbd91af0f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in gitpytohn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6d3794294c17a3d907304fefedc5e2344bd1644ec1b20803ced3b4570aa2ae2a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prrompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 55da4f454e16103986c37965b682072d1534eaecd0355710ca6276d5a583e7e1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progressba2r (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57ad7eeb7e8290f07b52a1170c9522d6542094ec49d0bedcbff805b83804cdde Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progessbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ea84655a6bdf22367da8b19f14ddad7fd954647aea7d9a1898691d1b33e36d37 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyscks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 218fe0fc74884d069c0760327f28a1518fff68c67d72088791bf21e76ec0f722 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discord-webhoook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b30cef689c4557df9f66d49904ba638679b48446f91e53ba1b2d04ee08f962f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discoord-webhook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2fe50e4b01342895cba3a8c127e43b3e3a8f290d299fef279aff2582f539450d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-toollbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 12274b228a2f445226f1bd25e1d0700a659e1a48fa6631f45bd28754d323eae5 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requsets-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2d0e15c87f5ed0cfdb2aaf2237d721367f2d8205773f543d296f9bf843903215 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-otolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2b0859d7c653755352e30a8a6b69da9c4db6210d03047f8400c29e5caa49b258 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in simplejjson (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f572306a73389fbedc32a79dbc80a609d7fa8f5846e6facee0228b7c10d633f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in xlsxwriiter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2a6dda192e7b92687ad8fbf7d2f1a649b1c7e43758b33ce6d77cc3de93256c09 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in oepnpyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f54d3df2e0dfcb8b4f7f2ded14c17e6fb804bfa85d891e0c68ad89ae7a29c59 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...