MAL-2026-14556 Malicious code in sap-quarterly-report (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2235bdf8263c08fede094c665d2fbc4e023a0f0c5e99631d70ae0685567b37ec During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in sap-quarterly-report (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2235bdf8263c08fede094c665d2fbc4e023a0f0c5e99631d70ae0685567b37ec During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2026-14555 Malicious code in ekx-report-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...

Malicious Package

Overview mathkitlite is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in mathkitlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c91a8962fd66464487bcdb5e2c217990cfdea55df22e7166c11703f91dfb7845 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14552 Malicious code in mathkitlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c91a8962fd66464487bcdb5e2c217990cfdea55df22e7166c11703f91dfb7845 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

weblate-fedora-messaging (>=0.1.0, <=0.12.0), wlhosted (>=2024.11.0, <=2025.1.0) potentially affected by CVE-2026-77573 via weblate (>=5.4.3, <=5.16.2)

weblate PYPI version =5.4.3, =0.1.0, =2024.11.0, =2025.1.0 Source cves: CVE-2026-77573 Source advisory: MEND:CVE-2026-77573...

weblate-fedora-messaging (>=0.1.0, <=0.12.0), wlhosted (>=2024.11.0, <=2025.1.0) potentially affected by CVE-2026-77507 via weblate (>=5.4.3, <=5.16.2)

weblate PYPI version =5.4.3, =0.1.0, =2024.11.0, =2025.1.0 Source cves: CVE-2026-77507 Source advisory: MEND:CVE-2026-77507...

weblate-fedora-messaging (>=0.1.0, <=0.12.0), wlhosted (>=2024.11.0, <=2025.1.0) potentially affected by CVE-2026-62326 via weblate (>=5.4.3, <=5.16.2)

weblate PYPI version =5.4.3, =0.1.0, =2024.11.0, =2025.1.0 Source cves: CVE-2026-62326 Source advisory: MEND:CVE-2026-62326...

weblate-fedora-messaging (>=0.1.0, <=0.12.0), wlhosted (>=2024.11.0, <=2025.1.0) potentially affected by CVE-2026-62249 via weblate (>=5.4.3, <=5.16.2)

weblate PYPI version =5.4.3, =0.1.0, =2024.11.0, =2025.1.0 Source cves: CVE-2026-62249 Source advisory: MEND:CVE-2026-62249...

weblate-fedora-messaging (>=0.1.0, <=0.12.0), wlhosted (>=2024.11.0, <=2025.1.0) potentially affected by CVE-2026-61792 via weblate (>=5.4.3, <=5.16.2)

weblate PYPI version =5.4.3, =0.1.0, =2024.11.0, =2025.1.0 Source cves: CVE-2026-61792 Source advisory: MEND:CVE-2026-61792...

weblate-fedora-messaging (>=0.1.0, <=0.12.0), wlhosted (>=2024.11.0, <=2025.1.0) potentially affected by CVE-2026-61790 via weblate (>=5.4.3, <=5.16.2)

weblate PYPI version =5.4.3, =0.1.0, =2024.11.0, =2025.1.0 Source cves: CVE-2026-61790 Source advisory: MEND:CVE-2026-61790...

weblate-fedora-messaging (>=0.1.0, <=0.12.0), wlhosted (>=2024.11.0, <=2025.1.0) potentially affected by CVE-2026-55228 via weblate (>=5.4.3, <=5.16.2)

weblate PYPI version =5.4.3, =0.1.0, =2024.11.0, =2025.1.0 Source cves: CVE-2026-55228 Source advisory: MEND:CVE-2026-55228...

weblate-fedora-messaging (>=0.1.0, <=0.12.0), wlhosted (>=2024.11.0, <=2025.1.0) potentially affected by CVE-2026-55227 via weblate (>=5.4.3, <=5.16.2)

weblate PYPI version =5.4.3, =0.1.0, =2024.11.0, =2025.1.0 Source cves: CVE-2026-55227 Source advisory: MEND:CVE-2026-55227...

MAL-2026-14545 Malicious code in pybitjs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611713d33cb9efee440b0a416812cbb2ceda3d43c0cdc73c1f8b353400209df5 The package's setuptools cmdclasses BuildPy, Develop invoke node pybitjs/js/main.js during pip install, and write a pybitjs.pth file containing impor...

Malicious code in pybitjs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611713d33cb9efee440b0a416812cbb2ceda3d43c0cdc73c1f8b353400209df5 The package's setuptools cmdclasses BuildPy, Develop invoke node pybitjs/js/main.js during pip install, and write a pybitjs.pth file containing impor...

Malicious code in trongridet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d37e79174370b2dcd44b05ddb583e65d2e0b878033aa0702653294dc965a3483 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2026-14542 Malicious code in trongridet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d37e79174370b2dcd44b05ddb583e65d2e0b878033aa0702653294dc965a3483 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

aioasuswrt (>=1.1.20, <=1.1.21) potentially affected by CVE-2026-54590 via asyncssh (1.15.0)

asyncssh PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - aioasuswrt =1.1.20, =1.1.21 Source cves: CVE-2026-54590 Source advisory: OSV:GHSA-QR67-GV47-XWWH...

django-owm-legacy (1.1.0), openwisp-controller (>=1.0.0, <=1.1.2) +2 more potentially affected by unknown CVE via openwisp-ipam (>=1.0.0, <=1.1.1)

openwisp-ipam PYPI version =1.0.0, =1.0.0, =1.1.0, =1.1.0, =1.1.3 Source cves: unknown CVE Source advisory: GHSA-X287-5C68-36WP...