MAL-2026-15577 Malicious code in auth-app-streamlit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9662b50ee4db956c8a7ec0bd4e1c9842f709ab2d5d181c325702c727e9e8a199 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in trongridor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46fcd4ed6da56295fe0a0b4a25cbaf848f10874c6905723472a57e7f59341341 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2026-15578 Malicious code in trongridor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46fcd4ed6da56295fe0a0b4a25cbaf848f10874c6905723472a57e7f59341341 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious Package

Overview flask-header-guard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in flask-header-guard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0cbaefa0fcface340b03a236573ed70df9b4d7773715321df057a9862e3f8 The package is presented as Flask security-headers middleware but ships a hostile payload wired to fire at install time and again whenever the librar...

Malicious code in calcboxlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227fe04d85516bd5348dea2c0c25078d057eacb4f439fd6a241ea0409b7afd09 setup.py and calcboxlite/init.py both invoke a top-level report function that reads getpass.getuser and socket.gethostname and POSTs them as JSON to ...

MAL-2026-15488 Malicious code in calcboxlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227fe04d85516bd5348dea2c0c25078d057eacb4f439fd6a241ea0409b7afd09 setup.py and calcboxlite/init.py both invoke a top-level report function that reads getpass.getuser and socket.gethostname and POSTs them as JSON to ...

Malicious code in yamlformat-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 60b8ab6c62beb2bbbe4e2926cf9cda17f060f9c4184d33ed57d363d9a771b734 During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2026-14589 Malicious code in yamlformat-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 60b8ab6c62beb2bbbe4e2926cf9cda17f060f9c4184d33ed57d363d9a771b734 During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in yamlformatter-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ef2cbf7d7c360d11860ea9383a1ed84b491e75361f994359fd97284a5d25cdc2 During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2026-14590 Malicious code in yamlformatter-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ef2cbf7d7c360d11860ea9383a1ed84b491e75361f994359fd97284a5d25cdc2 During import, the package collects sensitive information and exfiltrates it using DNS queries. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in pygame-renderkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdef1a055b3059d56581d5c0d33538e7799cfde5e42d596eb50094d06d984f54 setup.py registers a custom install command that forks a daemonized child during pip install and executes a base64-encoded Python payload via...

Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...

MAL-2026-14588 Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...

ROOT-APP-PYPI-CVE-2026-54284 CVE-2026-54284 in sqlparse - Patched by Root

Root has patched CVE-2026-54284 in the sqlparse package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-4340 CVE-2024-4340 in sqlparse - Patched by Root

Root has patched CVE-2024-4340 in the sqlparse package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-27JP-WM6Q-GP25 GHSA-27jp-wm6q-gp25 in sqlparse - Patched by Root

Root has patched GHSA-27jp-wm6q-gp25 in the sqlparse package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-62QF-JCQ8-8GXW GHSA-62qf-jcq8-8gxw in sqlparse - Patched by Root

Root has patched GHSA-62qf-jcq8-8gxw in the sqlparse package for Root:PyPI. Multiple fixed versions available...

Malicious code in flyteplugins-redis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 785b972da662fb9bf37532e8607149e096679239dbd373dc18406df647564c03 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14584 Malicious code in flyteplugins-redis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 785b972da662fb9bf37532e8607149e096679239dbd373dc18406df647564c03 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...