EUVD-2022-0060

Malicious code in bioql PyPI...

EUVD-2022-0062

Malicious code in bioql PyPI...

EUVD-2022-0394

Malicious code in bioql PyPI...

EUVD-2022-0388

Malicious code in bioql PyPI...

EUVD-2022-0034

Malicious code in bioql PyPI...

EUVD-2022-36062

Malicious code in bioql PyPI...

EUVD-2024-54732

Malicious code in bioql PyPI...

EUVD-2022-7199

Malicious code in bioql PyPI...

EUVD-2022-0117

Malicious code in bioql PyPI...

EUVD-2022-0378

Malicious code in bioql PyPI...

EUVD-2022-0033

Malicious code in bioql PyPI...

EUVD-2022-0391

Malicious code in bioql PyPI...

gobby (>=0.2.5, <=0.2.13), memu-py (>=1.3.0, <=1.5.1) potentially affected by CVE-2025-10965 via lazyllm (1.3.0)

lazyllm PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on lazyllm and may be impacted: - gobby =0.2.5, =1.3.0, =1.5.1 Source cves: CVE-2025-10965 Source advisory: SNYK:PYTHON-LAZYLLM-13110091...

125softnlp (0.0.1), a2 (>=0.10.11, <=0.10.13) +4784 more potentially affected by CVE-2025-55559 via tensorflow (>=1.0.1, <=2.22.0rc0)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.5.0, =0.1.6, =1.0.0, =0.0.1, =0.1.1, =0.6.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2025-55559 Source advisory: SNYK:PYTHON-TENSORFLOW-13052810...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28898 more potentially affected by CVE-2025-55554 via torch (>=1.0.0, <=2.14.1)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-55554 Source advisory: SNYK:PYTHON-TORCH-13052969...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10951 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10951 Source advisory: SNYK:PYTHON-MLLOGGER-13110027...

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

Cybersecurity researchers have discovered two new malicious packages in the Python Package Index PyPI repository that are designed to deliver a remote access trojan called SilentSync on Windows systems. "SilentSync is capable of remote command execution, file exfiltration, and screen capturing,"...

MAL-2025-191892 Malicious code in terminalcolornew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a555882888b9895fbe7575cc6121cad44600e17fb64d7551cacc33b29f2ae9f If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

Malicious code in onnxruntime-winml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5566aa4ecc644b36e90902092563c05e1852d751381539398f2307ae1fbefae6 Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...

MAL-2025-191806 Malicious code in onnxruntime-winml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5566aa4ecc644b36e90902092563c05e1852d751381539398f2307ae1fbefae6 Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...