10485 matches found
Malicious Package
Overview telebot-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
Malicious Package
Overview joule-sbx-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-13757 Malicious code in telebot-pro (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e8fd9df00738115f53aef8944ede8d1f3d2daf360c2d227b54204ee62e8f89 On instantiation of TeleBot, the package spawns a background thread that copies the Telegram Desktop tdata directory from %APPDATA%\Telegram...
MAL-2026-13732 Malicious code in joule-btp-extension (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91439e7a69d936aa8a65b16561f48e9d9abab26fc8e3af4087da8d367cfd2210 On pip install, setup.py runs a collectandexfiltrate routine that reads /private/etc/passwd, /private/etc/hosts, and /private/etc/sudoers; captures...
Malicious code in joule-btp-extension (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91439e7a69d936aa8a65b16561f48e9d9abab26fc8e3af4087da8d367cfd2210 On pip install, setup.py runs a collectandexfiltrate routine that reads /private/etc/passwd, /private/etc/hosts, and /private/etc/sudoers; captures...
Malicious code in euler-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e53c3aac169dec167a2e67afdfaff8f16408781a31dc6516afe115df3ffcc425 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-13730 Malicious code in euler-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e53c3aac169dec167a2e67afdfaff8f16408781a31dc6516afe115df3ffcc425 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in morpho-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 cb58dff63faa08e128ddd0d8d38b82c0711bb60d09d19755a8e8f398fa7d511d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-13731 Malicious code in morpho-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 cb58dff63faa08e128ddd0d8d38b82c0711bb60d09d19755a8e8f398fa7d511d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in dlmm-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e The package's top-level module runs a report routine on import, and setup.py invokes the same import at install time. The routine collects environmen...
MAL-2026-13729 Malicious code in dlmm-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e The package's top-level module runs a report routine on import, and setup.py invokes the same import at install time. The routine collects environmen...
Malicious code in dlmm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 044faa804b628c1751f6fa5f66a5f8835ecda1f4d2837ae70411d4630a0607ad Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-13728 Malicious code in dlmm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 044faa804b628c1751f6fa5f66a5f8835ecda1f4d2837ae70411d4630a0607ad Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in bigtime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14cc45326877547d5297956e4c2b5719122bcef140db0d7959e1b4da94e58d7 The package presents itself as a time module wrapper, but its init.py invokes qwe900.init, which performs two exfiltration behaviors on import. First...
MAL-2026-13712 Malicious code in bigtime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14cc45326877547d5297956e4c2b5719122bcef140db0d7959e1b4da94e58d7 The package presents itself as a time module wrapper, but its init.py invokes qwe900.init, which performs two exfiltration behaviors on import. First...
ROOT-APP-PYPI-CVE-2026-47734 CVE-2026-47734 in dulwich - Patched by Root
Root has patched CVE-2026-47734 in the dulwich package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-42563 CVE-2026-42563 in dulwich - Patched by Root
Root has patched CVE-2026-42563 in the dulwich package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-42305 CVE-2026-42305 in dulwich - Patched by Root
Root has patched CVE-2026-42305 in the dulwich package for Root:PyPI. Multiple fixed versions available...
MAL-2026-13681 Malicious code in btcflip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4271f738e49ead6113a249ca949232cad9664db210319a097b56385b1942970 The package advertises itself as an HTTP speed-up library, but on import it archives the user's Monero wallet directory C:\Users\Documents\Monero on...