36925 matches found
adaptdl-cli (>=0.2.2, <=0.2.11), agent-leash (>=0.3.0, <=0.13.0) +171 more potentially affected by CVE-2026-35536 via tornado (>=6.5.5, <=6.5.7)
tornado PYPI version =6.5.5, =0.2.2, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =0.1.0, =0.5.0, =0.1.2, =26.3.14, =26.8.0 - aomaker 2.1.0 and more Source cves: CVE-2026-35536 Source advisory: GHSA-WWV5-G3V4-889X...
Malicious Package
Overview gcphelpit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), anymodality (0.1.0) +30 more potentially affected by CVE-2026-83551 via sagemaker (>=1.52.1, <=2.254.1)
sagemaker PYPI version =1.52.1, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.17, =0.1.0, =0.1.1, =0.9.0, =0.2.8, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.1.2, =0.4.9 and more Source cves: CVE-2026-83551 Source advisory: MEND:CVE-2026-83551...
MAL-2026-15810 Malicious code in gcphelpit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...
Malicious code in gcphelpit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...
nemo-eval (0.2.0rc0) potentially affected by CVE-2026-61778 via megatron-bridge (0.2.0rc6)
megatron-bridge PYPI version 0.2.0rc6 is affected by a known vulnerability. The following packages have a transitive dependency on megatron-bridge and may be impacted: - nemo-eval 0.2.0rc0 Source cves: CVE-2026-61778 Source advisory: MEND:CVE-2026-61778...
nemo-eval (0.2.0rc0) potentially affected by CVE-2026-61779 via megatron-bridge (0.2.0rc6)
megatron-bridge PYPI version 0.2.0rc6 is affected by a known vulnerability. The following packages have a transitive dependency on megatron-bridge and may be impacted: - nemo-eval 0.2.0rc0 Source cves: CVE-2026-61779 Source advisory: MEND:CVE-2026-61779...
nemo-eval (0.2.0rc0) potentially affected by CVE-2026-61754 via megatron-bridge (0.2.0rc6)
megatron-bridge PYPI version 0.2.0rc6 is affected by a known vulnerability. The following packages have a transitive dependency on megatron-bridge and may be impacted: - nemo-eval 0.2.0rc0 Source cves: CVE-2026-61754 Source advisory: MEND:CVE-2026-61754...
a62-emotion (>=0.10.11, <=0.11.4), aac-metrics (>=0.5.5, <=0.6.0) +2512 more potentially affected by CVE-2026-80047 via transformers (>=4.49.0, <=5.8.1)
transformers PYPI version =4.49.0, =0.10.11, =0.5.5, =1.0.0.0, =0.2.1, =0.1.0, =1.3.8, =20260210.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-80047 Source advisory: GHSA-X9R9-C232-4Q39...
Malicious Package
Overview tallyboxlite is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in tallyboxlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 960a6b94c28c7be92373f0f2125106f8e6d0d500a5ca3988292e2bd7e189033c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-15809 Malicious code in tallyboxlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 960a6b94c28c7be92373f0f2125106f8e6d0d500a5ca3988292e2bd7e189033c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
agentyc (>=0.1.0, <=0.3.3), aiagents4pharma (>=0.0.0, <=1.49.1) +96 more potentially affected by CVE-2026-82398 via pypdf (>=6.0.0, <=6.14.2)
pypdf PYPI version =6.0.0, =0.1.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =1.1.0, =3.1.0, =3.9.11, =0.12.6.post1, =0.2.0, =0.2.0, =0.0.3, =0.0.5 and more Source cves: CVE-2026-82398 Source advisory: SNYK:PYTHON-PYPDF-19477040...
abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +1000 more potentially affected by CVE-2026-82397 via tornado (>=3.0.0, <=6.5.7)
tornado PYPI version =3.0.0, =0.0.0, =0.2.2, =0.0.3, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-82397 Source advisory: MEND:CVE-2026-82397...
[SECURITY] Fedora 44 Update: python-pip-26.0.1-3.fc44
pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...
ROOT-APP-PYPI-CVE-2026-59939 CVE-2026-59939 in httplib2 - Patched by Root
Root has patched CVE-2026-59939 in the httplib2 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-30922 CVE-2026-30922 in pyasn1 - Patched by Root
Root has patched CVE-2026-30922 in the pyasn1 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-59884 CVE-2026-59884 in pyasn1 - Patched by Root
Root has patched CVE-2026-59884 in the pyasn1 package for Root:PyPI. Multiple fixed versions available...