arca (>=0.1.0a0, <=0.1.0), mali (>=0.2775.0, <=0.4018.0) +4 more potentially affected by CVE-2026-87817 via gitpython (2.1.7)

gitpython PYPI version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - arca =0.1.0a0, =0.2775.0, =0.2304.0, =0.2304.0, =0.1.0a1, =1.0.0, =1.0.6 Source cves: CVE-2026-87817 Source advisory: OSV:PYSEC-2026-3982...

git-semver (>=0.1.2, <=0.1.5) potentially affected by CVE-2026-87817 via gitpython (2.0.9)

gitpython PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - git-semver =0.1.2, =0.1.5 Source cves: CVE-2026-87817 Source advisory: OSV:PYSEC-2026-3982...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +916 more potentially affected by CVE-2026-87817 via gitpython (>=0.3.4, <=3.1.59)

gitpython PYPI version =0.3.4, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-87817 Source advisory: MEND:CVE-2026-87817...

Malicious code in databricks-webapp-navigation-homepage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 31ec3549efe09642c539f13af8a2a75949a356f55046b6298c21a2deedda322c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-16080 Malicious code in databricks-webapp-navigation-homepage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 31ec3549efe09642c539f13af8a2a75949a356f55046b6298c21a2deedda322c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious Package

Overview databricks-webapp-navigation-homepage is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all...

Malicious Package

Overview py-devoli-common is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +145 more potentially affected by CVE-2026-84382 via httpx2 (>=2.2.0, <=2.10.0)

httpx2 PYPI version =2.2.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84382 Source advisory: SNYK:PYTHON-HTTPX2-20361663...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +145 more potentially affected by CVE-2026-84380 via httpx2 (>=2.2.0, <=2.10.0)

httpx2 PYPI version =2.2.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84380 Source advisory: OSV:GHSA-PF96-P4FJ-6566...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +145 more potentially affected by CVE-2026-84380 via httpx2 (>=2.2.0, <=2.10.0)

httpx2 PYPI version =2.2.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84380 Source advisory: SNYK:PYTHON-HTTPX2-20361639...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +145 more potentially affected by CVE-2026-84380 via httpx2 (>=2.2.0, <=2.10.0)

httpx2 PYPI version =2.2.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84380 Source advisory: GHSA-PF96-P4FJ-6566...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +145 more potentially affected by CVE-2026-84379 via httpx2 (>=2.2.0, <=2.10.0)

httpx2 PYPI version =2.2.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84379 Source advisory: SNYK:PYTHON-HTTPX2-20361638...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +102 more potentially affected by CVE-2026-84378 via httpx2 (>=2.5.0, <=2.9.1)

httpx2 PYPI version =2.5.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 - async-hermes-agent 0.20.4.1 and more Source cves: CVE-2026-84378 Source advisory: GHSA-F2FP-RGF2-35CP...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +102 more potentially affected by CVE-2026-84378 via httpx2 (>=2.5.0, <=2.9.1)

httpx2 PYPI version =2.5.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 - async-hermes-agent 0.20.4.1 and more Source cves: CVE-2026-84378 Source advisory: SNYK:PYTHON-HTTPX2-20510292...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +142 more potentially affected by CVE-2026-84381 via httpcore2 (>=2.0.0b1, <=2.9.1)

httpcore2 PYPI version =2.0.0b1, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2026-84381 Source advisory: SNYK:PYTHON-HTTPCORE2-20361640...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +129 more potentially affected by CVE-2026-73560 via vllm (>=0.1.3, <=0.25.1)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-73560 Source advisory: OSV:GHSA-4HHP-H66F-J5J7...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +129 more potentially affected by CVE-2026-73560 via vllm (>=0.1.3, <=0.25.1)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =0.0.38 and more Source cves: CVE-2026-73560 Source advisory: GHSA-4HHP-H66F-J5J7...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-80206 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-80206 Source advisory: GHSA-W3V8-GMH9-3WV7...

annotald (>=1.3.1, <=1.3.7) potentially affected by CVE-2026-80206 via nltk (2.0.4)

nltk PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald =1.3.1, =1.3.7 Source cves: CVE-2026-80206 Source advisory: OSV:GHSA-W3V8-GMH9-3WV7...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-80205 via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-80205 Source advisory: OSV:GHSA-RRV8-H7P8-RX55...