EUVD-2025-205380

Malicious code in aiogram-sever-patch PyPI...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12679 more potentially affected by CVE-2025-14927 via transformers (>=0.1.0, <=5.18.0)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =6.0.4 and more Source cves: CVE-2025-14927 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564366...

aana (>=0.2.1, <=0.2.2), abgrouponline (>=1.0.0, <=1.0.2) +577 more potentially affected by CVE-2025-14922 via diffusers (>=0.2.4, <=0.40.0)

diffusers PYPI version =0.2.4, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.1.2, =0.0.1, =0.0.3, =0.10.6, =0.0.1, =0.0.1, =1.8.20, =1.19.0 and more Source cves: CVE-2025-14922 Source advisory: SNYK:PYTHON-DIFFUSERS-14567485...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12679 more potentially affected by CVE-2025-14929 via transformers (>=0.1.0, <=5.18.0)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =6.0.4 and more Source cves: CVE-2025-14929 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564275...

0token (>=0.1.0, <=0.4.0), 3-04-2025-ttm (0.1.0) +12679 more potentially affected by CVE-2025-14930 via transformers (>=0.1.0, <=5.18.0)

transformers PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.5, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =6.0.4 and more Source cves: CVE-2025-14930 Source advisory: SNYK:PYTHON-TRANSFORMERS-14563374...

Malicious code in blastchamber-python-pypi (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192658 Malicious code in connections-api-hidden-runner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae6bedba7c21e763c5a0e27952cf75a13a7705e7681027c87a833417a2035b70 Importing the module downloads and starts remote executable identified as malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in f5rest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f8084e3c4c369a7dc22b67657aa22f3faf8e9b98df2721c9ff4e4c17d36fe028 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Security Bulletin: NVIDIA NeMo Framework - December 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, clone or update this software to version 2.5.3 or later from NVIDIA/NeMo Framework on NVIDIA GitHub and pypi. Go to NVIDIA Product Security...

Malicious code in helloharry123p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6e199ebf30ba4e39d4e6bd9fc4d31ffa9f0a7687e21f67e2e6e8c01e3f24717a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-192351 Malicious code in evil-rce (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74a74a4133ed8082eba8452bb59a82dcf6975e1e8c4d6630a47088c17d6b6cca Running the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-evil-rce...

jf-langflow (>=1.10.0, <=1.10.0.post7), langflow (>=1.8.0rc0, <=1.8.0rc2) +1 more potentially affected by CVE-2025-34291 via langflow-base (>=0.7.2, <=0.11.6)

langflow-base PYPI version =0.7.2, =1.10.0, =1.8.0rc0, =1.8.0rc2 - langflow-nightly 1.8.0.dev24 Source cves: CVE-2025-34291 Source advisory: SNYK:PYTHON-LANGFLOWBASE-14221425...

aiodatalayer (>=1.0.0, <=2.3.1), aiotieba-reviewer (>=0.5.0, <=0.6.2) +77 more potentially affected by CVE-2025-65896 via asyncmy (>=0.2.5, <=0.2.15)

asyncmy PYPI version =0.2.5, =1.0.0, =0.5.0, =1.5.0, =1.0.8, =2.0.9, =1.0.8, =1.0.0, =1.0.0, =1.3.9, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =1.3.12 - dungngo-awslabs-core-mcp-server 1.0.9 and more Source cves: CVE-2025-65896 Source advisory: SNYK:PYTHON-ASYNCMY-14185104...

MAL-2025-191761 Malicious code in hooktest3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d1104ab742749c40acd3c4c989dba15890db64fd22f688dea72727fbc5b9d23 During installation, the package starts a code to retrieve and execute commands from Discord --- Category: MALICIOUS - The campaign has clearly malicious inten...

Malicious code in discordhelper-ecr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

openedx-nex-tutor (>=20.0.3, <=20.0.6), tutor-android (>=17.0.0, <=22.0.0) +56 more potentially affected by CVE-2025-65681 via tutor (>=12.2.0, <=22.0.2)

tutor PYPI version =12.2.0, =20.0.3, =17.0.0, =17.0.0, =0.1.1, =0.2.0, =14.0.0, =18.3.0, =18.0.0, =14.0.0rc3, =1.0.0, =18.2.8, =21.0.0, =14.0.0, =18.0.0 and more Source cves: CVE-2025-65681 Source advisory: SNYK:PYTHON-TUTOR-14135978...

Remote Command Execution

scio-pypi is vulnerable to Remote Command Execution. The vulnerability is due to torch.load executing unsafe deserialization even when weightsonly=True, which allows an attacker to craft malicious model files that trigger arbitrary code execution during loading...

Malicious code in atlassian-praz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 06798e3c48471c4e66160030618f78c51d71d2a7660c5545648cf7902b3eecd4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in speed-testing-vps (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 227b3ee25e084b57a160b7287f80a8ab8da0559184c81b5e9cae1d03941ca51b The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

Malicious code in mzip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cfa6ef3ee944ed5eef4429c7c9ec9488d9c2c70be6435ee1019851527272a9e4 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...