MAL-2025-48909 Malicious code in trstk (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48902 Malicious code in testpackageclaim (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in testpackageclaim (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in testpackage-hello (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48901 Malicious code in testpackage-hello (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in test422 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in test421 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48899 Malicious code in test421 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in request-unitest (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48897 Malicious code in request-unitest (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48894 Malicious code in my-test-packagexx (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiohttp-ssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 212da09ca68167bc40e86f1c838fe5aeb5a6656da5ecbbdb5d17df01b2c262d8 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

MAL-2025-191618 Malicious code in aiohttp-ssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 212da09ca68167bc40e86f1c838fe5aeb5a6656da5ecbbdb5d17df01b2c262d8 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

The vulnerability of the get_cache_dir() function in the framework for working with Large Language Models (LLM) like LlamaIndex allows a attacker to execute a cache poisoning attack.

The vulnerability of the getcachedir function in the framework for working with Large Language Models LLM like LlamaIndex is related to the creation of temporary files with insecure permissions. Exploiting this vulnerability could allow an attacker to execute a cache poisoning attack...

VulnerabilityAgent

VulnerabilityAgent 🛡️ An autonomous agent built on the BeeAI...

CVE-2025-53051

Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise RDBMS Functional Index...

Malicious code in smart-scheduler (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2792dcc5f5baaa05e1da756d9e57efedf800477f8b30e3c0b096d0baa17f59c9 Package downloads and starts a malicious executable and hides its existence --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-191661 Malicious code in smart-scheduler (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2792dcc5f5baaa05e1da756d9e57efedf800477f8b30e3c0b096d0baa17f59c9 Package downloads and starts a malicious executable and hides its existence --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-191657 Malicious code in requests-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c944343070e83d2eab122e862b5c7349722ee7ceae5ae21e428926480681d24f Package contains capabilities for remote control of the user's computer and exfiltrating data --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in lbank-connector-pythons (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e2d03134723d75ab2f0b36c6acad54fa5d16b4ba0f04bf2705e188fd19626b9 This is a copy of a legit package with added basic exfiltration in the setup.py --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages,...