MAL-2026-16346 Malicious code in rrs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c488c5d20c788e88c2d4f0a0cb1eb03317bc71edb05964adad62241fd1295e On launch of the rrs CLI, a background thread captures a full-screen screenshot via mss and POSTs the image together with hostname, username,...

volatility3 v2.28.2

Volatility 3: The volatile memory extraction framework Volatility is the world's most widely used framework for extracting digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated but offer visibility into...

Malicious code in urc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 abbaafd909f0cd09835c29c401432a9aa6094c2007973ba23e70f3fe06b07785 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-16298 Malicious code in urc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 abbaafd909f0cd09835c29c401432a9aa6094c2007973ba23e70f3fe06b07785 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in py-venv-doctor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976f29262fc2c20f615a0aa8b0e0bb9cd3ab3cbbe1c019da6f17c3c8c108d185 On every CLI invocation, py-venv-doctor's default 'telemetry' path builds a snapshot containing the complete os.environ dictionary all environment...

MAL-2026-16296 Malicious code in py-venv-doctor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976f29262fc2c20f615a0aa8b0e0bb9cd3ab3cbbe1c019da6f17c3c8c108d185 On every CLI invocation, py-venv-doctor's default 'telemetry' path builds a snapshot containing the complete os.environ dictionary all environment...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +214 more potentially affected by CVE-2026-93841 via vllm (>=0.1.3, <=0.30.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =1.0.2 and more Source cves: CVE-2026-93841 Source advisory: SNYK:PYTHON-VLLM-20044413...

credactor v2.7.2

Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...

Malicious Package

Overview requests-auroras is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview marketing-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview requests-asetwe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview pyjstat-smooth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview aiosendletter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview requests-triwes is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview index-forum is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in requests-auroras (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 afa39517de816c01400eef99ef6ebce1357910c217c5e0ff55e4a252ea15a4c5 During installation, package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2026-16274 Malicious code in requests-auroras (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 afa39517de816c01400eef99ef6ebce1357910c217c5e0ff55e4a252ea15a4c5 During installation, package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +214 more potentially affected by CVE-2026-93436 via vllm (>=0.1.3, <=0.30.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =1.0.2 and more Source cves: CVE-2026-93436 Source advisory: SNYK:PYTHON-VLLM-20044391...

MAL-2026-16275 Malicious code in requests-triwes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa01be0759de95b7a1628930718f7b3bf372eff0c777aace419196e327e77078 During installation, package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in requests-triwes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa01be0759de95b7a1628930718f7b3bf372eff0c777aace419196e327e77078 During installation, package starts a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...