ROOT-APP-PYPI-GHSA-539M-9XH6-Q6RR GHSA-539m-9xh6-q6rr in GitPython - Patched by Root

Root has patched GHSA-539m-9xh6-q6rr in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-67325 CVE-2026-67325 in gitpython - Patched by Root

Root has patched CVE-2026-67325 in the gitpython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-44244 CVE-2026-44244 in GitPython - Patched by Root

Root has patched CVE-2026-44244 in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-6P8H-3WGX-97GF GHSA-6p8h-3wgx-97gf in GitPython - Patched by Root

Root has patched GHSA-6p8h-3wgx-97gf in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-2F96-G7MH-G2HX GHSA-2f96-g7mh-g2hx in GitPython - Patched by Root

Root has patched GHSA-2f96-g7mh-g2hx in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42284 CVE-2026-42284 in GitPython - Patched by Root

Root has patched CVE-2026-42284 in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-JM78-9FVV-MHGR GHSA-jm78-9fvv-mhgr in GitPython - Patched by Root

Root has patched GHSA-jm78-9fvv-mhgr in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-3RP5-JJMW-4WV2 GHSA-3rp5-jjmw-4wv2 in GitPython - Patched by Root

Root has patched GHSA-3rp5-jjmw-4wv2 in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-78675 CVE-2026-78675 in gitpython - Patched by Root

Root has patched CVE-2026-78675 in the gitpython package for Root:PyPI. Multiple fixed versions available...

Malicious code in cloushaar-poc-exfil-91827 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b36f7c6e3e2e536f43b51acc410985240e6de6d7bb1e1d78126131e888806f The package's setup.py, executed automatically during pip install, iterates a hardcoded list of installer-side filesystem paths /flag, /flag.txt,...

MAL-2026-16377 Malicious code in cloushaar-poc-exfil-91827 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b36f7c6e3e2e536f43b51acc410985240e6de6d7bb1e1d78126131e888806f The package's setup.py, executed automatically during pip install, iterates a hardcoded list of installer-side filesystem paths /flag, /flag.txt,...

Malicious Package

Overview rrs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +214 more potentially affected by CVE-2026-94622 via vllm (>=0.1.3, <=0.30.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =1.0.2 and more Source cves: CVE-2026-94622 Source advisory: SNYK:PYTHON-VLLM-20044439...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +214 more potentially affected by CVE-2026-94625 via vllm (>=0.1.3, <=0.30.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =1.0.2 and more Source cves: CVE-2026-94625 Source advisory: SNYK:PYTHON-VLLM-20044434...

MAL-2026-16366 Malicious code in pullgetsage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b751049f78b324983511537b6c053a0ed080639dd7c447d87494eabc134ba3 On import, init.py archives the installer's Telegram Desktop tdata directory %APPDATA%/Telegram Desktop/tdata into a zip named 'aiosendletterlogs' an...

Malicious code in starlette-healthchecks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebffb3f581b979c3e9a1dc0aef347111b50922326b2181cc9d2bc009c4e7021 The package advertises itself as ASGI healthcheck/logging middleware, but its documented entry point configurelogging re-exported from...

MAL-2026-16356 Malicious code in starlette-healthchecks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebffb3f581b979c3e9a1dc0aef347111b50922326b2181cc9d2bc009c4e7021 The package advertises itself as ASGI healthcheck/logging middleware, but its documented entry point configurelogging re-exported from...

ROOT-APP-PYPI-CVE-2026-46374 CVE-2026-46374 in sqlfluff - Patched by Root

Root has patched CVE-2026-46374 in the sqlfluff package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-84382 CVE-2026-84382 in httpx2 - Patched by Root

Root has patched CVE-2026-84382 in the httpx2 package for Root:PyPI. Multiple fixed versions available...

Malicious code in rrs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c488c5d20c788e88c2d4f0a0cb1eb03317bc71edb05964adad62241fd1295e On launch of the rrs CLI, a background thread captures a full-screen screenshot via mss and POSTs the image together with hostname, username,...