11222 matches found
Malicious Package
Overview syswatch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview env-validator-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview telemetry-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in syswatch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740c9125f18d68081f742b3316d07c54727fb4aab5555a398c0c04e31ba9bb54 Importing syswatch starts a background thread that, on Windows, fetches a JSON manifest from...
MAL-2026-15811 Malicious code in syswatch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740c9125f18d68081f742b3316d07c54727fb4aab5555a398c0c04e31ba9bb54 Importing syswatch starts a background thread that, on Windows, fetches a JSON manifest from...
Malicious Package
Overview gcphelpit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in gcphelpit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...
MAL-2026-15810 Malicious code in gcphelpit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...
Malicious Package
Overview tallyboxlite is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
abstract-hugpy-dev (>=0.1.32, <=0.1.35), abstract-ocr (>=0.0.1.69, <=0.0.1.70) +414 more potentially affected by CVE-2026-84202 via modelscope (>=1.1.1, <=1.40.1)
modelscope PYPI version =1.1.1, =0.1.32, =0.0.1.69, =0.0.29, =1.11.4, =20260210.0.0, =0.1.0, =0.4.0, =2.0.0, =0.5.4, =1.0.0, =1.0.1 - any4any 0.1.1 and more Source cves: CVE-2026-84202 Source advisory: SNYK:PYTHON-MODELSCOPE-19497923...
Malicious code in tallyboxlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 960a6b94c28c7be92373f0f2125106f8e6d0d500a5ca3988292e2bd7e189033c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-15809 Malicious code in tallyboxlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 960a6b94c28c7be92373f0f2125106f8e6d0d500a5ca3988292e2bd7e189033c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
ROOT-APP-PYPI-CVE-2024-45231 CVE-2024-45231 in django - Patched by Root
Root has patched CVE-2024-45231 in the django package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-64458 CVE-2025-64458 in django - Patched by Root
Root has patched CVE-2025-64458 in the django package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-57833 CVE-2025-57833 in django - Patched by Root
Root has patched CVE-2025-57833 in the django package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-5629 CVE-2024-5629 in pymongo - Patched by Root
Root has patched CVE-2024-5629 in the pymongo package for Root:PyPI. Multiple fixed versions available...
[SECURITY] Fedora 44 Update: python-pip-26.0.1-3.fc44
pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...
ROOT-APP-PYPI-CVE-2026-59939 CVE-2026-59939 in httplib2 - Patched by Root
Root has patched CVE-2026-59939 in the httplib2 package for Root:PyPI. Multiple fixed versions available...