Malicious Package

Overview dlmm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview neutrl-contracts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview chaintest is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview pytablute is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

ROOT-APP-PYPI-CVE-2026-47734 CVE-2026-47734 in dulwich - Patched by Root

Root has patched CVE-2026-47734 in the dulwich package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42305 CVE-2026-42305 in dulwich - Patched by Root

Root has patched CVE-2026-42305 in the dulwich package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-52726 CVE-2026-52726 in dulwich - Patched by Root

Root has patched CVE-2026-52726 in the dulwich package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42563 CVE-2026-42563 in dulwich - Patched by Root

Root has patched CVE-2026-42563 in the dulwich package for Root:PyPI. Multiple fixed versions available...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +232 more potentially affected by CVE-2026-71554 via h2 (3.2.0)

h2 PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aapns =19.11.0, =0.1.0, =0.0.1, =0.4.0, =0.4.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.6, =0.0.1, =0.1.0, =0.0.1, =0.1.1 and more Source cves:...

arkindex-base-worker (0.3.7), bestatic (>=0.0.11, <=0.0.30) +18 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.7.1)

pymdown-extensions PYPI version 10.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker 0.3.7 - bestatic =0.0.11, =0.1.0, =0.1.2, =0.3.4, =0.3.7 and more Source cves: CVE-2026-67422 Source...

anoteai (>=0.10.0, <=0.20.0), buisciii-tools (>=2.2.2, <=2.2.5) +23 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.4.0)

pymdown-extensions PYPI version 10.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - anoteai =0.10.0, =2.2.2, =0.1.0, =4.21.4, =1.0.6, =0.17.0, =2.7.7, =6.2.0, =0.2.0, =0.2.0, =0.2.2 and more Source cves:...

arkindex-base-worker (>=0.3.7rc2, <=0.3.7rc10), mafiagg (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2026-67422 via pymdown-extensions (10.7.0)

pymdown-extensions PYPI version 10.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arkindex-base-worker =0.3.7rc2, =1.0.0, =0.2.54, =0.2.65 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

arctic-ai (0.1.0), arkindex-base-worker (>=0.3.2rc5, <=0.3.2) potentially affected by CVE-2026-67422 via pymdown-extensions (9.9.2)

pymdown-extensions PYPI version 9.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - arctic-ai 0.1.0 - arkindex-base-worker =0.3.2rc5, =0.3.2 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +72 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.8.2, =0.3.0, =0.6.0 and more Source cves: CVE-2026-18654 Source advisory: OSV:PYSEC-2026-3627...

cocpyth (>=0.1.1, <=0.1.2), pretix (>=4.19.0, <=4.20.4) potentially affected by CVE-2026-71852 via pypdf (3.8.1)

pypdf PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cocpyth =0.1.1, =4.19.0, =4.20.4 Source cves: CVE-2026-71852 Source advisory: OSV:PYSEC-2026-3656...

aiexec-base (0.6.4), ano-code (>=0.1.6, <=0.1.11) +39 more potentially affected by CVE-2026-71852 via pypdf (5.1.0)

pypdf PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiexec-base 0.6.4 - ano-code =0.1.6, =0.0.1, =1.0.0, =0.6.0, =0.0.3, =0.1.0, =0.3.1, =3.3.6, =1.0.16, =0.2.37, =1.0.0, =0.1.11, =0.1.24 and more Sourc...

mitmproxy (>=0.18.2, <=0.18.3), padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2026-71554 via h2 (2.4.4)

h2 PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - mitmproxy =0.18.2, =0.9.0, =1.1.0 Source cves: CVE-2026-71554 Source advisory: OSV:PYSEC-2026-3628...

aid-push (>=2.1.0, <=2.1.4), alexa-browser-client (>=0.3.3, <=3.3.2) +46 more potentially affected by CVE-2026-71554 via h2 (2.6.2)

h2 PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aid-push =2.1.0, =0.3.3, =1.3.0, =1.2.0, =0.2.0, =0.7.1.1, =0.0.1, =0.4.0, =17.5.1, =0.1.10, =0.4.10 and more Source cves: CVE-2026-71554 Source advisory:...

aquests (>=0.7.8.5b1, <=0.7.16.18), kyoukai (2.2.1.post1) +1 more potentially affected by CVE-2026-71554 via h2 (3.0.1)

h2 PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aquests =0.7.8.5b1, =0.7.16.18 - kyoukai 2.2.1.post1 - th2c 0.3.1 Source cves: CVE-2026-71554 Source advisory: OSV:PYSEC-2026-3628...

labext-pkg (2.1.1), mkdocs-techdocs-core (>=0.2.3, <=1.0.1) potentially affected by CVE-2026-67422 via pymdown-extensions (9.0.0)

pymdown-extensions PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - labext-pkg 2.1.1 - mkdocs-techdocs-core =0.2.3, =1.0.1 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...