agentyc (>=0.1.0, <=0.3.3), aiagents4pharma (>=0.0.0, <=1.49.1) +96 more potentially affected by CVE-2026-82398 via pypdf (>=6.0.0, <=6.14.2)

pypdf PYPI version =6.0.0, =0.1.0, =0.0.0, =1.1.0, =1.0.0a3, =0.2.0, =1.1.0, =3.1.0, =3.9.11, =0.12.6.post1, =0.2.0, =0.2.0, =0.0.3, =0.0.5 and more Source cves: CVE-2026-82398 Source advisory: SNYK:PYTHON-PYPDF-19477040...

0xpwn (0.1.1), a2a-acl (>=0.0.14, <=0.1.1) +795 more potentially affected by CVE-2026-37004 via litellm (>=1.0.0, <=1.84.10)

litellm PYPI version =1.0.0, =0.0.14, =0.0.14, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10062025 - agent-memory-server 0.15.0 - agent-opt 0.0.1 and more Source cves: CVE-2026-37004 Source advisory: SNYK:PYTHON-LITELLM-19477048...

abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +1000 more potentially affected by CVE-2026-82397 via tornado (>=3.0.0, <=6.5.7)

tornado PYPI version =3.0.0, =0.0.0, =0.2.2, =0.0.3, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-82397 Source advisory: MEND:CVE-2026-82397...

[SECURITY] Fedora 44 Update: python-pip-26.0.1-3.fc44

pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

ROOT-APP-PYPI-CVE-2026-59939 CVE-2026-59939 in httplib2 - Patched by Root

Root has patched CVE-2026-59939 in the httplib2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59884 CVE-2026-59884 in pyasn1 - Patched by Root

Root has patched CVE-2026-59884 in the pyasn1 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-30922 CVE-2026-30922 in pyasn1 - Patched by Root

Root has patched CVE-2026-30922 in the pyasn1 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-65106 CVE-2025-65106 in langchain-core - Patched by Root

Root has patched CVE-2025-65106 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-44843 CVE-2026-44843 in langchain-core - Patched by Root

Root has patched CVE-2026-44843 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

Malicious Package

Overview tronlinker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview pyservercheck is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in tronlinker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 18f3b8d2924d38ddd8e852a2ca3311ccb85a82a4a6eedc836c4b8086465dfaee Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2026-15588 Malicious code in tronlinker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 18f3b8d2924d38ddd8e852a2ca3311ccb85a82a4a6eedc836c4b8086465dfaee Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious Package

Overview trongridor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview auth-app-streamlit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-15577 Malicious code in auth-app-streamlit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9662b50ee4db956c8a7ec0bd4e1c9842f709ab2d5d181c325702c727e9e8a199 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in auth-app-streamlit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9662b50ee4db956c8a7ec0bd4e1c9842f709ab2d5d181c325702c727e9e8a199 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-15578 Malicious code in trongridor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46fcd4ed6da56295fe0a0b4a25cbaf848f10874c6905723472a57e7f59341341 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in trongridor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46fcd4ed6da56295fe0a0b4a25cbaf848f10874c6905723472a57e7f59341341 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious Package

Overview flask-header-guard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...