speakeasy v2.0.0b8

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...

Malicious Package

Overview faiss-cpu-avx512 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview licloud is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cli-anything-ai-market is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

ROOT-APP-PYPI-CVE-2024-6345 CVE-2024-6345 in setuptools - Patched by Root

Root has patched CVE-2024-6345 in the setuptools package for Root:PyPI. Multiple fixed versions available...

Malicious code in licloud (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 380753d9b58e068e84b5bd87242ad31e4b833cdcc056021925aa2dcc91633b46 setup.py unconditionally collects the installer's OS name, username, and hostname and POSTs them to a hardcoded plain-HTTP bare-IP endpoint...

MAL-2026-16219 Malicious code in licloud (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 380753d9b58e068e84b5bd87242ad31e4b833cdcc056021925aa2dcc91633b46 setup.py unconditionally collects the installer's OS name, username, and hostname and POSTs them to a hardcoded plain-HTTP bare-IP endpoint...

MAL-2026-16212 Malicious code in cli-anything-ai-market (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5319f74a06670d40b020831dae38da696aa966dc1fdfde45063abb0024df922 setup.py runs automatically during pip install and POSTs the installer's OS, username USER/USERNAME, and hostname via COMPUTERNAME on Windows or the...

Malicious code in cli-anything-ai-market (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5319f74a06670d40b020831dae38da696aa966dc1fdfde45063abb0024df922 setup.py runs automatically during pip install and POSTs the installer's OS, username USER/USERNAME, and hostname via COMPUTERNAME on Windows or the...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +214 more potentially affected by CVE-2026-92220 via vllm (>=0.1.3, <=0.30.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.7, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =1.0.2 and more Source cves: CVE-2026-92220 Source advisory: SNYK:PYTHON-VLLM-19851884...

ROOT-APP-PYPI-CVE-2026-31899 CVE-2026-31899 in cairosvg - Patched by Root

Root has patched CVE-2026-31899 in the cairosvg package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-67422 CVE-2026-67422 in pymdown-extensions - Patched by Root

Root has patched CVE-2026-67422 in the pymdown-extensions package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-46338 CVE-2026-46338 in pymdown-extensions - Patched by Root

Root has patched CVE-2026-46338 in the pymdown-extensions package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-84381 CVE-2026-84381 in httpcore2 - Patched by Root

Root has patched CVE-2026-84381 in the httpcore2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-47874 CVE-2024-47874 in starlette - Patched by Root

Root has patched CVE-2024-47874 in the starlette package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48710 CVE-2026-48710 in starlette - Patched by Root

Root has patched CVE-2026-48710 in the starlette package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-24486 CVE-2026-24486 in python-multipart - Patched by Root

Root has patched CVE-2026-24486 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42561 CVE-2026-42561 in python-multipart - Patched by Root

Root has patched CVE-2026-42561 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

Malicious code in faiss-cpu-avx512 (PyPI)

[email protected] through 1.9.7 on PyPI impersonates faiss-cpu and ships no FAISS code: faisscpuavx512/init.py fetchnative downloads an xz-compressed binary from https://files.catbox.moe/ ffoa50.xz in 1.9.0 to 1.9.3, 0oreqo.xz in 1.9.4, vwfr94.xz in 1.9.5, 3l3x0v.xz in 1.9.6, weu5u2.xz in...

MAL-2026-16203 Malicious code in faiss-cpu-avx512 (PyPI)

[email protected] through 1.9.7 on PyPI impersonates faiss-cpu and ships no FAISS code: faisscpuavx512/init.py fetchnative downloads an xz-compressed binary from https://files.catbox.moe/ ffoa50.xz in 1.9.0 to 1.9.3, 0oreqo.xz in 1.9.4, vwfr94.xz in 1.9.5, 3l3x0v.xz in 1.9.6, weu5u2.xz in...