CVE-2022-23530

GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to v0.1.8 are vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package. Extracting files using shutil.unpackarchive from a potentially malicious tarball without validating that the destinati...

CVE-2022-0339

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

EUVD-2026-1102

Malicious code in robustinfer PyPI...

SourceBroken: A Large-Scale Analysis on the (Un)Reliability of SourceRank in the PyPI Ecosystem

SourceRank is a scoring system made of 18 metrics that assess the popularity and quality of open-source packages. Despite being used in several recent studies, none has thoroughly analyzed its reliability against evasion attacks aimed at inflating the score of malicious packages, thereby...

Malicious code in extrazip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

Malicious code in telebot-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae13454f920b5cce1011546e4802ed263ce8218d4b484ef8471142abb42c3f3e The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

EUVD-2025-205380

Malicious code in aiogram-sever-patch PyPI...

Malicious code in blastchamber-python-pypi (PyPI)

--- -= Per source details. Do not edit below this line.=-...

auto-pr (1.2.0), beer-garden (>=3.0.0.dev1, <=3.35.1) +23 more potentially affected by CVE-2025-68480 via marshmallow (>=4.0.0, <=4.1.1)

marshmallow PYPI version =4.0.0, =3.0.0.dev1, =2.3.1, =3.31.0, =1.8.0, =2.0.3, =3.18.1.dev10, =0.0.1, =1.115.1, =0.0.1, =1.4.5, =6.0.0, =6.25.7 - nvidia-tao-core 6.0.0 and more Source cves: CVE-2025-68480 Source advisory: MEND:CVE-2025-68480...

auto-pr (1.2.0), beer-garden (>=3.0.0.dev1, <=3.35.1) +23 more potentially affected by CVE-2025-68480 via marshmallow (>=4.0.0, <=4.1.1)

marshmallow PYPI version =4.0.0, =3.0.0.dev1, =2.3.1, =3.31.0, =1.8.0, =2.0.3, =3.18.1.dev10, =0.0.1, =1.115.1, =0.0.1, =1.4.5, =6.0.0, =6.25.7 - nvidia-tao-core 6.0.0 and more Source cves: CVE-2025-68480 Source advisory: GHSA-428G-F7CQ-PGP5...

auto-pr (1.2.0), beer-garden (>=3.0.0.dev1, <=3.35.1) +23 more potentially affected by CVE-2025-68480 via marshmallow (>=4.0.0, <=4.1.1)

marshmallow PYPI version =4.0.0, =3.0.0.dev1, =2.3.1, =3.31.0, =1.8.0, =2.0.3, =3.18.1.dev10, =0.0.1, =1.115.1, =0.0.1, =1.4.5, =6.0.0, =6.25.7 - nvidia-tao-core 6.0.0 and more Source cves: CVE-2025-68480 Source advisory: OSV:GHSA-428G-F7CQ-PGP5...

MAL-2025-192658 Malicious code in connections-api-hidden-runner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae6bedba7c21e763c5a0e27952cf75a13a7705e7681027c87a833417a2035b70 Importing the module downloads and starts remote executable identified as malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in f5rest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f8084e3c4c369a7dc22b67657aa22f3faf8e9b98df2721c9ff4e4c17d36fe028 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Security Bulletin: NVIDIA NeMo Framework - December 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, clone or update this software to version 2.5.3 or later from NVIDIA/NeMo Framework on NVIDIA GitHub and pypi. Go to NVIDIA Product Security...

Malicious code in helloharry123p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6e199ebf30ba4e39d4e6bd9fc4d31ffa9f0a7687e21f67e2e6e8c01e3f24717a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-192351 Malicious code in evil-rce (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74a74a4133ed8082eba8452bb59a82dcf6975e1e8c4d6630a47088c17d6b6cca Running the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-12-evil-rce...

MAL-2025-191761 Malicious code in hooktest3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d1104ab742749c40acd3c4c989dba15890db64fd22f688dea72727fbc5b9d23 During installation, the package starts a code to retrieve and execute commands from Discord --- Category: MALICIOUS - The campaign has clearly malicious inten...

agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +4 more potentially affected by CVE-2025-68492 via chainlit (>=2.4.400, <=2.6.3)

chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.2.2, =0.2.4 Source cves: CVE-2025-68492 Source advisory: SNYK:PYTHON-CHAINLIT-14157231...

Malicious code in discordhelper-ecr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Remote Command Execution

scio-pypi is vulnerable to Remote Command Execution. The vulnerability is due to torch.load executing unsafe deserialization even when weightsonly=True, which allows an attacker to craft malicious model files that trigger arbitrary code execution during loading...