cocpyth (>=0.1.1, <=0.1.2), pretix (>=4.19.0, <=4.20.4) potentially affected by CVE-2026-82398 via pypdf (3.8.1)

pypdf PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cocpyth =0.1.1, =4.19.0, =4.20.4 Source cves: CVE-2026-82398 Source advisory: OSV:GHSA-FC8X-2RWW-XW9M...

agatta (>=1.0.0, <=1.0.2), agentbuddy (0.1.1.dev33) +102 more potentially affected by CVE-2026-82398 via pypdf (3.17.4)

pypdf PYPI version 3.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agatta =1.0.0, =0.0.3, =0.0.1, =1.1.0, =0.0.2, =1.2.0, =0.6.7, =1.2.1, =0.1.3, =0.0.1, =0.8.2 - cadenai 0.1.0 and more Source cves: CVE-2026-82398...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81727 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81727 Source advisory: OSV:GHSA-F794-5JV7-7672...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81727 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81727 Source advisory: GHSA-F794-5JV7-7672...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81723 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81723 Source advisory: OSV:GHSA-VP2X-QP44-57V7...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +929 more potentially affected by CVE-2026-81723 via nltk (>=3.0.0, <=3.10.2)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-81723 Source advisory: GHSA-VP2X-QP44-57V7...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-81723 via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-81723 Source advisory: OSV:GHSA-VP2X-QP44-57V7...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-12875 +1 more via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-12875, CVE-2026-12876 Source advisory: OSV:GHSA-FF5C-CP5C-9WJF...

abi-ds-utils (>=0.1.2, <=1.2.3), abi-pyspark-utils (>=0.1.1, <=0.1.4) +279 more potentially affected by CVE-2026-32773 via pyspark (>=3.0.0, <=3.5.7)

pyspark PYPI version =3.0.0, =0.1.2, =0.1.1, =0.1.5, =0.0.1, =1.7.0.dev1715243393, =1.7.0.dev1715243330, =1.7.0.dev1715246251, =1.7.0.dev1715246284, =1.0.6, =0.0.12, =0.0.1, =0.0.7, =0.0.31 and more Source cves: CVE-2026-32773 Source advisory: GHSA-9437-39HJ-3C93...

abi-ds-utils (>=0.1.2, <=1.2.3), abi-pyspark-utils (>=0.1.1, <=0.1.4) +279 more potentially affected by CVE-2026-32773 via pyspark (>=3.0.0, <=3.5.7)

pyspark PYPI version =3.0.0, =0.1.2, =0.1.1, =0.1.5, =0.0.1, =1.7.0.dev1715243393, =1.7.0.dev1715243330, =1.7.0.dev1715246251, =1.7.0.dev1715246284, =1.0.6, =0.0.12, =0.0.1, =0.0.7, =0.0.31 and more Source cves: CVE-2026-32773 Source advisory: OSV:GHSA-9437-39HJ-3C93...

Malicious Package

Overview syswatch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview env-validator-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview telemetry-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

abi-ds-utils (>=0.1.2, <=1.2.3), abi-pyspark-utils (>=0.1.1, <=0.1.4) +279 more potentially affected by CVE-2026-32773 via pyspark (>=3.0.0, <=3.5.7)

pyspark PYPI version =3.0.0, =0.1.2, =0.1.1, =0.1.5, =0.0.1, =1.7.0.dev1715243393, =1.7.0.dev1715243330, =1.7.0.dev1715246251, =1.7.0.dev1715246284, =1.0.6, =0.0.12, =0.0.1, =0.0.7, =0.0.31 and more Source cves: CVE-2026-32773 Source advisory: MEND:CVE-2026-32773...

agent-vm-hermes-adapter (>=0.0.116, <=0.0.126), borgee-hermes-plugin (>=0.1.3, <=0.3.5) +7 more potentially affected by CVE-2026-84289 via hermes-agent (>=0.13.0, <=0.18.2)

hermes-agent PYPI version =0.13.0, =0.0.116, =0.1.3, =0.1.0, =3.0.0, =0.1.2, =0.3.0, =0.10.0, =1.0.0, =1.1.0 - tokenlab-hermes-provider 0.1.0 Source cves: CVE-2026-84289 Source advisory: MEND:CVE-2026-84289...

centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2026-84310 via pypdf (5.6.1)

pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2026-84310 Source advisory: OSV:GHSA-23W6-3W8W-8484...

label-sorter (>=0.2.0, <=0.3.0), sereto (0.3.5) potentially affected by CVE-2026-84310 via pypdf (5.8.0)

pypdf PYPI version 5.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - label-sorter =0.2.0, =0.3.0 - sereto 0.3.5 Source cves: CVE-2026-84310 Source advisory: OSV:GHSA-23W6-3W8W-8484...

sereto (0.2.1), ten8t (>=0.0.14, <=0.0.21) potentially affected by CVE-2026-84310 via pypdf (5.3.1)

pypdf PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - sereto 0.2.1 - ten8t =0.0.14, =0.0.21 Source cves: CVE-2026-84310 Source advisory: OSV:GHSA-23W6-3W8W-8484...

Malicious code in syswatch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740c9125f18d68081f742b3316d07c54727fb4aab5555a398c0c04e31ba9bb54 Importing syswatch starts a background thread that, on Windows, fetches a JSON manifest from...

MAL-2026-15811 Malicious code in syswatch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740c9125f18d68081f742b3316d07c54727fb4aab5555a398c0c04e31ba9bb54 Importing syswatch starts a background thread that, on Windows, fetches a JSON manifest from...