honeypot-auditor

.. :: H-AUDITOR :: v1.0.3 :: "MARCANDO... PORTADORA DETECTADA" :: --- "¿warez? no. cabeceras. intercambiamos banners, no bins." "si responde a cualquier contraseña, no es producción — es un señuelo." "respeta al sysop. sondea solo lo que posees. no dejes ningún STOR atrás." Does This Look Like An...

aura

.. image:: https://cdn.sourcecode.ai/imgs/logotype.png :target: https://aura.sourcecode.ai/ ====== .. class:: center |homepageflair| |docsflair| |dockerflair| |licenseflair| |travisflair| |pypiflair| 源码审计与静态代码分析 Aura 是一个静态分析框架，旨在应对 PyPI 上日益猖獗的恶意包和脆弱代码的威胁。 项目目标： 提供自动化的监控系统，用于检测上传至 PyPI...

HiddenEyeReborn

Introducción La herramienta HiddenEye: Reborn es un proyecto destinado a explotar el error humano. Como mi segundo intento de crear una herramienta integral para este propósito, actualmente cuenta con numerosas funciones de phishing. Planeamos agregar más funcionalidades pronto. Mantente al tanto...

CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – Hook malicioso de instalación de paquetes PyPI ejecución de setup.py Código del programa Python setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg',...

InstaLooter

InstaLooter |starme| .. |starme| image:: https://img.shields.io/github/stars/althonos/InstaLooter.svg?style=social&label=Star :target: https://github.com/althonos/InstaLooter 并非所有宝藏都是金银财宝，伙计。 |build| |repo| |versions| |format| |coverage| |doc| |grade| |license| |keepachangelog| |saythanks|...

shai-scan

shai-scan Zero-dependency CLI scanner for npm and PyPI supply chain compromises. Why? On May 11, 2026, a self-propagating supply chain worm dubbed Mini Shai-Hulud CVE-2026-45321, GHSA-g7cv-rxg3-hmpx compromised the npm ecosystem. Attributed to TeamPCP aka DeadCatx3, PCPcat, ShellForce, CipherForc...

ROOT-APP-PYPI-AIKIDO-2026-499214 AIKIDO-2026-499214 in urllib3 - Patched by Root

Root has patched AIKIDO-2026-499214 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-43804 CVE-2023-43804 in urllib3 - Patched by Root

Root has patched CVE-2023-43804 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-66418 CVE-2025-66418 in urllib3 - Patched by Root

Root has patched CVE-2025-66418 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-44431 CVE-2026-44431 in urllib3 - Patched by Root

Root has patched CVE-2026-44431 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-50182 CVE-2025-50182 in urllib3 - Patched by Root

Root has patched CVE-2025-50182 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-52804 CVE-2024-52804 in tornado - Patched by Root

Root has patched CVE-2024-52804 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-QPPV-J76H-2RPX GHSA-qppv-j76h-2rpx in tornado - Patched by Root

Root has patched GHSA-qppv-j76h-2rpx in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-35536 CVE-2026-35536 in tornado - Patched by Root

Root has patched CVE-2026-35536 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-753J-MPMX-QQ6G GHSA-753j-mpmx-qq6g in tornado - Patched by Root

Root has patched GHSA-753j-mpmx-qq6g in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-49853 CVE-2026-49853 in tornado - Patched by Root

Root has patched CVE-2026-49853 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-82397 CVE-2026-82397 in tornado - Patched by Root

Root has patched CVE-2026-82397 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-32875 CVE-2026-32875 in ujson - Patched by Root

Root has patched CVE-2026-32875 in the ujson package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54911 CVE-2026-54911 in ujson - Patched by Root

Root has patched CVE-2026-54911 in the ujson package for Root:PyPI. Multiple fixed versions available...

CVE-2026-103871

A flaw was found in pulp-python's PyPI simple index. Project names are written into the HTML index without escaping. A user who can publish a Python package can store markup in the package name. A person who opens that index in a browser runs the markup in the origin that served the page, and the...