Malicious code in flyteplugins-nsight (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46b08f15350f8ecf5aabe4633458f517dda24d5eb2687ab95680dc068cf2f129 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14583 Malicious code in flyteplugins-nsight (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46b08f15350f8ecf5aabe4633458f517dda24d5eb2687ab95680dc068cf2f129 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in flyteplugins-agento11y (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46ad72ab2f7b1b228296686a3090c2c81be3a2257b47fa801b300c1f7b66c09a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14581 Malicious code in flyteplugins-agento11y (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46ad72ab2f7b1b228296686a3090c2c81be3a2257b47fa801b300c1f7b66c09a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in flyteplugins-echo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e40fe85c793ea410384a1c17184e6f7fe08f039a19599b9fb9933cda4078b85c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14582 Malicious code in flyteplugins-echo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e40fe85c793ea410384a1c17184e6f7fe08f039a19599b9fb9933cda4078b85c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2026-37004 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2026-37004 Sourc...

academia-tts (>=0.2.3, <=0.2.4), b2aiprep (>=0.20.0, <=3.3.3) +30 more potentially affected by CVE-2026-10036 via speechbrain (>=0.5.11, <=1.0.3)

speechbrain PYPI version =0.5.11, =0.2.3, =0.20.0, =0.1.0, =0.35.1, =2.1.0, =0.6.0, =0.3.1, =1.0.0, =0.0.28, =0.0.1, =1.0.0.post1, =0.0.2, =1.1.1, =1.1.2 - ovos-audio-transformer-plugin-speechbrain-langdetect 0.0.0a10 and more Source cves: CVE-2026-10036 Source advisory: MEND:CVE-2026-10036...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-81726 via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-81726 Source advisory: OSV:PYSEC-2026-3740...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-81722 via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-81722 Source advisory: OSV:PYSEC-2026-3738...

onnx-passes (>=0.2.0, <=0.3.1) potentially affected by CVE-2026-79720 via netron (8.4.0)

netron PYPI version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - onnx-passes =0.2.0, =0.3.1 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-79720 via netron (8.5.0)

netron PYPI version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - finn-plus 1.2.0 - finn-plus-notebooks =1.3.0, =1.4.0 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

openml-pytorch (0.1.6) potentially affected by CVE-2026-79720 via netron (8.9.9)

netron PYPI version 8.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - openml-pytorch 0.1.6 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

stitchnet (>=0.2.0, <=0.2.2), trt-engine-explorer (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-79720 via netron (7.9.9)

netron PYPI version 7.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - stitchnet =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

stitchnet (>=0.2.0, <=0.2.2), trt-engine-explorer (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-79718 via netron (7.9.9)

netron PYPI version 7.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - stitchnet =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79718 Source advisory: OSV:PYSEC-2026-4001...

finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-79719 via netron (8.5.0)

netron PYPI version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - finn-plus 1.2.0 - finn-plus-notebooks =1.3.0, =1.4.0 Source cves: CVE-2026-79719 Source advisory: OSV:PYSEC-2026-4002...

stitchnet (>=0.2.0, <=0.2.2), trt-engine-explorer (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-79719 via netron (7.9.9)

netron PYPI version 7.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - stitchnet =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79719 Source advisory: OSV:PYSEC-2026-4002...

onnx-passes (>=0.0.0, <=0.1.1) potentially affected by CVE-2026-79718 via netron (8.3.8)

netron PYPI version 8.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - onnx-passes =0.0.0, =0.1.1 Source cves: CVE-2026-79718 Source advisory: OSV:PYSEC-2026-4001...

Malicious Package

Overview yamlformat-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview yamlformatter-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...