abi-ds-utils (1.0.1), acceldata-o2a (1.0.0) +268 more potentially affected by CVE-2026-68076 via apache-airflow (>=1.8.2, <=3.3.1rc2)

apache-airflow PYPI version =1.8.2, =0.8.44.4rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.2.1, =0.2.9b1, =1.0.7, =0.4.0, =0.5.0, =0.1.0a1, =0.1.0a7 - airflow-clickhouse-plug 1.6.2 and more Source cves: CVE-2026-68076 Source advisory: MEND:CVE-2026-68076...

example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (4.0.0)

apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2026-68868 Source advisory:...

airflow-add-ons (>=0.2.9b1, <=0.2.9b2) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (7.0.0)

apache-airflow-providers-google PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-add-ons =0.2.9b1, =0.2.9b2 Source cves: CVE-2026-68868 Source advisory: OSV:PYSEC-2026-371...

dataflow-airflow (2.10.10) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (19.0.0)

apache-airflow-providers-google PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dataflow-airflow 2.10.10 Source cves: CVE-2026-68868 Source advisory: OSV:PYSEC-2026-3714...

airflow-tools (>=0.9.0, <=0.11.0), risk-custom-secrets-provider (>=1.0.9, <=1.1.3) potentially affected by CVE-2026-68868 via apache-airflow-providers-google (10.23.0)

apache-airflow-providers-google PYPI version 10.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-tools =0.9.0, =1.0.9, =1.1.3 Source cves: CVE-2026-68868 Source advisory:...

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them. Threat intelligence firm CloudSEK now says a dataset it...

apitestez (>=1.0.35, <=1.1.3), arthexis (>=0.1.3, <=0.11.0) +69 more potentially affected by CVE-2026-9318 via tablib (>=3.0.0, <=3.9.0)

tablib PYPI version =3.0.0, =1.0.35, =0.1.3, =2.0.0, =9.6.4, =9.8.7.1, =202307.1107.0, =8.0.0, =3.12.6, =0.22.10, =6.26.0, =0.6.18, =0.6.29 and more Source cves: CVE-2026-9318 Source advisory: GHSA-GQGW-JGHV-MXWX...

bitwarden (>=0.2.2, <=0.4.0), bubble3 (>=2018.3.29, <=2018.6.4) +4 more potentially affected by CVE-2026-9318 via tablib (0.12.1)

tablib PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - bitwarden =0.2.2, =2018.3.29, =0.0.1, =0.9.4, =0.0.1, =0.0.4 Source cves: CVE-2026-9318 Source advisory: OSV:GHSA-GQGW-JGHV-MXWX...

apis-core (>=0.14.0, <=0.14.1), iambic (>=2.0.1, <=2.3.3) +2 more potentially affected by CVE-2026-9318 via tablib (2.0.0)

tablib PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - apis-core =0.14.0, =2.0.1, =0.3.0a2, =0.3.0a3 - taccsite-cms 3.6.0a0 Source cves: CVE-2026-9318 Source advisory: OSV:GHSA-GQGW-JGHV-MXWX...

django-cms-qe (1.4.3), django-import-export (2.0.1) +1 more potentially affected by CVE-2026-9318 via tablib (0.14.0)

tablib PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - django-cms-qe 1.4.3 - django-import-export 2.0.1 - iambic 1.0.0 Source cves: CVE-2026-9318 Source advisory: OSV:GHSA-GQGW-JGHV-MXWX...

apitestez (>=1.0.35, <=1.1.3), arthexis (>=0.1.3, <=0.11.0) +69 more potentially affected by CVE-2026-9318 via tablib (>=3.0.0, <=3.9.0)

tablib PYPI version =3.0.0, =1.0.35, =0.1.3, =2.0.0, =9.6.4, =9.8.7.1, =202307.1107.0, =8.0.0, =3.12.6, =0.22.10, =6.26.0, =0.6.18, =0.6.29 and more Source cves: CVE-2026-9318 Source advisory: OSV:GHSA-GQGW-JGHV-MXWX...

bubble (>=2016.3.17, <=2016.8.16), winston (>=0.1.1, <=0.2.3) potentially affected by CVE-2026-9318 via tablib (0.11.2)

tablib PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - bubble =2016.3.17, =0.1.1, =0.2.3 Source cves: CVE-2026-9318 Source advisory: OSV:GHSA-GQGW-JGHV-MXWX...

Malicious code in joule-sbx-poc (PyPI)

Source: kam193 c460336aaf7e02cc7b37e4a0e58df5e22431f9de9ea852af21bb1aa2f333039c During installation, the code exfiltrates basic information and exfiltrates more information to a localhost service as well as starts a reverse shell there. It seems to be an internal test that was uploaded to a publi...

Malicious code in telebot-pro (PyPI)

Source: kam193 610b15fa9ed3d59133ac59b1104d43337faddd2ee77eaf21fd238bea6ac4f540 When using the provided bot class, the code starts a hidden exfiltration thread that collects Telegram session files, pictures and information about the machine, like connected WiFi networks. --- Category: MALICIOUS -...

Malicious Package

Overview telebot-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview joule-sbx-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-13756 Malicious code in joule-sbx-poc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c460336aaf7e02cc7b37e4a0e58df5e22431f9de9ea852af21bb1aa2f333039c During installation, the code exfiltrates basic information and exfiltrates more information to a localhost service as well as starts a reverse shell there. It...

Malicious code in joule-sbx-poc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c460336aaf7e02cc7b37e4a0e58df5e22431f9de9ea852af21bb1aa2f333039c During installation, the code exfiltrates basic information and exfiltrates more information to a localhost service as well as starts a reverse shell there. It...

MAL-2026-13757 Malicious code in telebot-pro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e8fd9df00738115f53aef8944ede8d1f3d2daf360c2d227b54204ee62e8f89 On instantiation of TeleBot, the package spawns a background thread that copies the Telegram Desktop tdata directory from %APPDATA%\Telegram...

agent-toolkit (0.1.9), ailite (>=6.0.2, <=6.1.10) +51 more potentially affected by CVE-2026-72742 via dspy (>=0.1.5, <=3.3.0b1)

dspy PYPI version =0.1.5, =6.0.2, =0.1.0, =0.7.7, =0.3.5, =0.1.9, =0.1.0, =2.5.5, =0.1.0.dev0, =0.3.5, =0.6.9 and more Source cves: CVE-2026-72742 Source advisory: MEND:CVE-2026-72742...