EUVD-2025-27060

Malicious code in bioql PyPI...

EUVD-2021-33184

Malicious code in bioql PyPI...

EUVD-2024-54748

Malicious code in bioql PyPI...

EUVD-2025-26452

Malicious code in bioql PyPI...

EUVD-2024-50492

Malicious code in bioql PyPI...

EUVD-2025-29789

Malicious code in bioql PyPI...

EUVD-2025-31522

Malicious code in bioql PyPI...

EUVD-2025-26431

Malicious code in bioql PyPI...

EUVD-2024-49202

Malicious code in bioql PyPI...

EUVD-2022-54143

Malicious code in bioql PyPI...

EUVD-2022-54351

Malicious code in bioql PyPI...

EUVD-2023-59988

Malicious code in bioql PyPI...

EUVD-2022-54129

Malicious code in bioql PyPI...

EUVD-2024-38484

Malicious code in bioql PyPI...

RLSA-2025:9940 Moderate: python-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

[SECURITY] Fedora 43 Update: python-pip-25.1.1-18.fc43

pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

SUSE CVE-2025-59538

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Cybersecurity researchers have flagged a malicious package on the Python Package Index PyPI repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems. The deceptive...

An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely

...

Malicious code in emoted (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c1542aa2ac34ff34c8c27bcfa0753cb100f1779f8b6acf274ed21c36866b795 Obfuscated code contains e.g. capabilities for downloading and executing code from a hardcoded location. It's also recognized as malware --- Category: MALICIOU...