11243 matches found
flowflops (>=0.0.1.post2211140919, <=0.0.1.post2211151211) potentially affected by CVE-2025-63397 via oneflow (0.9.0)
oneflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oneflow and may be impacted: - flowflops =0.0.1.post2211140919, =0.0.1.post2211151211 Source cves: CVE-2025-63397 Source advisory: SNYK:PYTHON-ONEFLOW-13876667...
MAL-2025-191927 Malicious code in wayspiritmcp-weather (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c3dbe830c7b2364daef2e4634c16062b86b0b26b88f95533e9413aa91bc646fd Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it see...
builder-addon-pca (>=0.0.1, <=0.0.3), configparser-crypt (>=0.6.2, <=1.1.0) +5 more potentially affected by CVE-2025-63675 via cryptidy (1.2.4)
cryptidy PYPI version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptidy and may be impacted: - builder-addon-pca =0.0.1, =0.6.2, =1.4.0, =0.2.0, =2.2.0rc6, =0.9.0, =0.0.4, =1.0.6 Source cves: CVE-2025-63675 Source advisory:...
Malicious code in speedd-testing-bot (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2aaec37a58d7717b510aa569770af696e33ae7f9a59e733af3d6341d712f0d66 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
MAL-2025-191876 Malicious code in speedd-testing-bot (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2aaec37a58d7717b510aa569770af696e33ae7f9a59e733af3d6341d712f0d66 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
Malicious code in requests-os (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c944343070e83d2eab122e862b5c7349722ee7ceae5ae21e428926480681d24f Package contains capabilities for remote control of the user's computer and exfiltrating data --- Category: MALICIOUS - The campaign has clearly malicious...
MAL-2025-191642 Malicious code in kirux189894 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f147ce226cffa7d6f6b34db801242958dc198c8d18c01cef735b65439dae8678 Package simulates malicious activity during installation and has no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest package...
MAL-2025-191670 Malicious code in abhamzufu (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7ef1806d244274823ed462cd27dc9ec91a4c26d7bc7141bd652ecf05cb40c2dc Package simulates malicious activity during installation and has no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest package...
EUVD-2025-31863
EUVD-2025-31863...
EUVD-2021-0012
Malware in sbrugna...
EUVD-2020-29099
Malware in sbrugna...
EUVD-2014-0044
Malware in sbrugna...
EUVD-2020-5588
Malware in sbrugna...
EUVD-2018-4950
Malware in sbrugna...
EUVD-2025-26811
Malicious code in bioql PyPI...
EUVD-2021-34692
Malicious code in bioql PyPI...
EUVD-2022-54439
Malicious code in bioql PyPI...
EUVD-2022-54430
Malicious code in bioql PyPI...