22717 matches found
MAL-2025-191928 Malicious code in web3dummycti (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9a702a53b1f08d4ee8e06e9dc19f6c942ee7bd755274f898a2ff737796557316 If the method from the module is called, it attempts to download a malicious code identified as msf payload and save it locally. In the analysed version, the...
MAL-2025-191855 Malicious code in req-pre-automate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6ce39a0e7a45f8d70e0e7e0d0e597b5029dcfcdd422ec0fec324921c5021a9ca If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...
NVIDIA GPU Display Driver 输入验证错误漏洞
NVIDIA GPU Display Driver is a display driver from NVIDIA Corporation. The NVIDIA GPU Display Driver suffers from an input validation error vulnerability that stems from a specially crafted parameter that results in improper index validation, which could lead to data tampering or denial of servic...
CVE-2025-41375 SQL Injection in Limesurvey
SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, update and delete database via 'token' parameter in '/index.php' endpoint...
Malicious code in prof-tg-dooorto-qu (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b4b5d4d87a39a286c8665b40b510ac0016d0b71fcc83fde246dd1bca7402af09 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...
Malicious code in num2words (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a528edd10eb63e7c7932830fdb314983cadc840ce8ccfbaa04ad821bbdc1da The num2words project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions...
Malicious code in zlsrc (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6624 Malicious code in zipf (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zlapp (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zipf (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6623 Malicious code in ziggonext (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ziggonext (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tulipgui-python (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in torrent-tracker-scraper (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in torchao-nightly (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in terraform-binary-wheel (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6597 Malicious code in support-developer (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in spokeoapi (PyPI)
--- -= Per source details. Do not edit below this line.=-...