MAL-2026-14349 Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

Malicious Package

Overview reqcrypts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in reqcrypts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb4e239b6344dfe684483344d4d1a2da013a4d506b78d81e9096c6b31a690ae reqcrypts is published as a drop-in HTTP client import reqcrypts; reqcrypts.geturl but its RequestHandler wraps every JSON response through a...

MAL-2026-14341 Malicious code in reqcrypts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb4e239b6344dfe684483344d4d1a2da013a4d506b78d81e9096c6b31a690ae reqcrypts is published as a drop-in HTTP client import reqcrypts; reqcrypts.geturl but its RequestHandler wraps every JSON response through a...

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-71492 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-71492 Source advisory: SNYK:PYTHON-BANKS-19233387...

pacxplorer-ng (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-55894 via capstone (6.0.0a5)

capstone PYPI version 6.0.0a5 is affected by a known vulnerability. The following packages have a transitive dependency on capstone and may be impacted: - pacxplorer-ng =1.0.0, =1.0.2 Source cves: CVE-2026-55894 Source advisory: MEND:CVE-2026-55894...

wagtail-liveedit (0.0.21), wagtail-modeltranslation (>=0.15.0, <=0.15.2) potentially affected by unknown CVE via wagtail (7.0.0)

wagtail PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-liveedit 0.0.21 - wagtail-modeltranslation =0.15.0, =0.15.2 Source cves: unknown CVE Source advisory: GHSA-JM5P-837G-RV8G...

coop (0.7.0) potentially affected by unknown CVE via wagtail (1.12.6)

wagtail PYPI version 1.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop 0.7.0 Source cves: unknown CVE Source advisory: OSV:GHSA-JM5P-837G-RV8G...

aimmo (>=0.57.1b6141, <=0.61.8b52), cfl-common (>=4.3.0, <=4.14.2) +9 more potentially affected by unknown CVE via wagtail (2.3.0)

wagtail PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - aimmo =0.57.1b6141, =4.3.0, =2.28.0, =2.3.0, =0.2.0, =2.4.0, =0.2.0, =0.1.5, =0.6.1 - wagtailsurveys 0.2.0 Source cves: unknown CVE Source advisor...

aimmo (>=0.61.9b59, <=1.3.1), cfl-common (>=4.15.0, <=5.26.7) +19 more potentially affected by unknown CVE via wagtail (2.11.9)

wagtail PYPI version 2.11.9 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - aimmo =0.61.9b59, =4.15.0, =4.15.0, =2.11.0, =0.2.10, =2.5.1, =0.1.0, =3.0.0, =0.9.0, =0.9.0, =0.9.4 and more Source cves: unknown CVE Source...

aratinga (0.1.0a0.dev3), coop (>=7.1.0, <=7.2.1) +7 more potentially affected by unknown CVE via wagtail (>=7.1.0, <=7.2.3)

wagtail PYPI version =7.1.0, =7.1.0, =1.1.1, =2.0.0, =0.0.1, =7.1.0a1, =7.2.0b0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-WAGTAIL-19233398...

aratinga (0.1.0a0.dev3), coop (>=7.1.0, <=7.2.1) +7 more potentially affected by unknown CVE via wagtail (>=7.1.0, <=7.2.3)

wagtail PYPI version =7.1.0, =7.1.0, =1.1.1, =2.0.0, =0.0.1, =7.1.0a1, =7.2.0b0 Source cves: unknown CVE Source advisory: GHSA-JM5P-837G-RV8G...

wagtail-whoosh (>=0.2.1, <=0.2.3) potentially affected by unknown CVE via wagtail (2.5.0)

wagtail PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-whoosh =0.2.1, =0.2.3 Source cves: unknown CVE Source advisory: OSV:GHSA-JM5P-837G-RV8G...

coop (>=2.0.3, <=2.0.4), molo-core (>=8.0.0, <=8.0.2) +7 more potentially affected by unknown CVE via wagtail (2.0.2)

wagtail PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop =2.0.3, =8.0.0, =8.0.0, =0.1.0, =1.0.0, =0.7.0, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-JM5P-837G-RV8G...

coop (>=0.8.0, <=0.8.1), django-wagtail-feeds (0.0.3) +11 more potentially affected by unknown CVE via wagtail (1.13.4)

wagtail PYPI version 1.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop =0.8.0, =0.1.1, =6.0.1, =6.3.0, =0.4.1, =0.4.0, =0.5.1, =0.10.3, =1.0.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory:...

coop (>=2.12.0, <=2.12.6), meine-stadt-transparent (0.2.12) +7 more potentially affected by unknown CVE via wagtail (2.12.6)

wagtail PYPI version 2.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop =2.12.0, =0.2.0, =0.10.2, =0.11.0 - wagtail-nav-menus 3.5.0 - wagtail-tag-manager 0.25.1 - wagtailstreamforms 3.14.0 Source cves: unknown CV...

coop (>=2.10.0, <=2.10.2), meine-stadt-transparent (0.2.9) +15 more potentially affected by unknown CVE via wagtail (2.10.2)

wagtail PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop =2.10.0, =0.3.1, =0.5.4, =3.0.3, =0.23.0, =0.24.2 - wagtail-test 0.0.0 - wagtail-treemodeladmin 1.2.1 - wagtailperson 0.12.0 - wagtailpress...

coderedcms (>=0.23.0, <=0.25.2), coop (>=2.16.0, <=2.16.2) +44 more potentially affected by unknown CVE via wagtail (2.16.3)

wagtail PYPI version 2.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.23.0, =2.16.0, =0.1.29, =2.5.7, =2.2.0, =1.1.0, =1.0.0, =0.0.3, =1.2.0, =0.5.0, =5.0.0, =0.6.0, =0.7.0 and more Source cves: unknow...

coderedcms (>=0.15.0, <=0.15.2), coop (2.5.0) +7 more potentially affected by unknown CVE via wagtail (2.5.2)

wagtail PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.15.0, =0.0.3, =0.7.0rc2, =0.16.5, =0.20.1 - wagtail-textract 1.2.0.dev0 - wagtail-treemodeladmin 1.0.5 Source cves: unknown CVE Sour...

coop (>=0.3.1, <=0.4.6), molo-core (>=5.22.3, <=5.22.5) +2 more potentially affected by unknown CVE via wagtail (1.9.1)

wagtail PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop =0.3.1, =5.22.3, =0.9.3, =0.9.5 Source cves: unknown CVE Source advisory: OSV:GHSA-JM5P-837G-RV8G...