MAL-2026-14525 Malicious code in 0xfighter3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a97978609c71d681a69a2da613c5e52b257a2062d7805b8db25243db50ff36f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in 0xfighter3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a97978609c71d681a69a2da613c5e52b257a2062d7805b8db25243db50ff36f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in bigquery-agent-analytics-tracing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08fbff35384a45aedc39545dd2a174889a1c35f3e6c9d044c2c201905402ad99 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14524 Malicious code in bigquery-agent-analytics-tracing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08fbff35384a45aedc39545dd2a174889a1c35f3e6c9d044c2c201905402ad99 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14523 Malicious code in rce-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c27b8e593dc0298e09bb4a5fd6acc68dc03bf324bdc7267e87482fdd10b0fa2d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in rce-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c27b8e593dc0298e09bb4a5fd6acc68dc03bf324bdc7267e87482fdd10b0fa2d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in syntaxerror-package-12345 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14522 Malicious code in syntaxerror-package-12345 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

PT-2026-86430

Summary The PyPI account that publishes pantheon-agents was compromised in the June 2026 "Hades" PyPI supply-chain attack Mini Shai-Hulud / Miasma lineage. The attacker used a stolen, long-lived PyPI API token to upload trojanized releases pantheon-agents 0.6.1 and 0.6.2 directly to PyPI. Only th...

Malicious code in minecraft-ytreceiver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...

MAL-2026-14516 Malicious code in minecraft-ytreceiver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...

MAL-2026-14488 Malicious code in python-walletlibr-v (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom...

Malicious code in python-walletlibr-v (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom...

abraham3k (>=1.3.8, <=1.5.3), accutuning-helpers (>=1.0.32, <=1.0.33) +74 more potentially affected by CVE-2026-76843 via flair (>=0.4.5, <=0.15.1)

flair PYPI version =0.4.5, =1.3.8, =1.0.32, =0.0.1, =0.1.0, =0.1.20, =0.1.0, =0.1.0, =0.0.1.1, =0.2.4, =0.1.1, =0.0.1rc2, =0.0.1rc3488056308109 - classmail 0.1.0 and more Source cves: CVE-2026-76843 Source advisory: SNYK:PYTHON-FLAIR-19256938...

MAL-2026-15693 Malicious code in py-devoli-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in py-devoli-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in msrcpoc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57de2918e25798c84b17d6a743fbadb99a5e564b8ea34e1ab5d4a0ff6d509df0 The OpenSSF Package Analysis project identified 'msrcpoc' @ 99.1.9 pypi as malicious. It is considered malicious because: - The package executes...

MAL-2026-14444 Malicious code in msrcpoc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57de2918e25798c84b17d6a743fbadb99a5e564b8ea34e1ab5d4a0ff6d509df0 The OpenSSF Package Analysis project identified 'msrcpoc' @ 99.1.9 pypi as malicious. It is considered malicious because: - The package executes...

Malicious Package

Overview syntaxerror-package-12345 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview python-walletlibr-v is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...