acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), aihandler (>=1.8.15, <=1.19.0) +117 more potentially affected by CVE-2026-12479 via keras (2.12.0)

keras PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - acetone-nnet =0.1.0.dev2, =1.8.15, =1.8.17, =0.1.18, =1.8.14, =1.1.0, =0.2.2.dev0, =1.3.0, =0.10.0, =0.2.0, =1.0.0, =1.0.1 - beyondml 0.1.5 and more...

axcorsrmri (0.0.1), behavython (>=0.7.0, <=0.9.8) +8 more potentially affected by CVE-2026-12481 via keras (2.12.0rc1)

keras PYPI version 2.12.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - axcorsrmri 0.0.1 - behavython =0.7.0, =0.3.21, =0.1.5, =0.29.0, =2.11.0rc1, =2.11.0rc1, =2.11.0rc1, =2.11.0rc2 - tensorflow-text 2.10.0rc0 Source...

animl (>=1.1.2, <=1.1.4), annopro (>=0.1.0rc1, <=0.2.0) +64 more potentially affected by CVE-2026-12481 via keras (2.6.0)

keras PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - animl =1.1.2, =0.1.0rc1, =0.47.0, =1.0.1, =0.0.3, =2.2.0, =2.4.1, =1.0.0rc1, =4.5.2, =0.48.1, =1.1.3, =0.2.4, =0.0.1, =0.0.2 and more Source cves:...

aigarmic (>=1.0.0, <=1.0.1), albedo (0.1.0) +129 more potentially affected by CVE-2026-12480 via keras (2.14.0)

keras PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aigarmic =1.0.0, =0.40.4, =0.0.0, =0.30.5, =0.3.0, =0.1.0, =0.1.0, =3.0.2, =2.0.0, =1.0.0rc1, =0.0.7, =1.3.1 and more Source cves: CVE-2026-12480...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2026-12484 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2026-12484 Sourc...

Malicious code in btcflip (PyPI)

Source: kam193 2b305ae4851e877fcea4950e019342d31782bde7e3c49d11847e2ede65776f78 During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-kotanku Reasons based on the campaign: -...

Malicious code in btcflx (PyPI)

Source: kam193 504aca220be0f03b6572f62dc3fc4a49ace09be61a969e39713c890f28afe62a During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-kotanku Reasons based on the campaign: -...

Malicious Package

Overview kotoraka is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in kotoraka (PyPI)

Source: kam193 e9ba78f7ee9a259fc6e518295fe3d0217c83808bbdf0fff2107883cb3cf50b3c During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-kotanku Reasons based on the campaign: -...

Malicious Package

Overview btcflx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview btcflip is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

free (>=0.0.1, <=0.0.2), hdltex (1.0.4) +2 more potentially affected by CVE-2026-12570 via keras (2.0.9)

keras PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - free =0.0.1, =1.0.0, =1.0.1, =1.0.2 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

cde (>=0.1.0, <=0.2.0.1), deeppavlov (>=0.0.5.1, <=0.0.5.3) potentially affected by CVE-2026-12570 via keras (2.1.2)

keras PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cde =0.1.0, =0.0.5.1, =0.0.5.3 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2026-12570 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2026-12570 Source...

axcorsrmri (0.0.1), behavython (>=0.7.0, <=0.9.8) +8 more potentially affected by CVE-2026-12570 via keras (2.12.0rc1)

keras PYPI version 2.12.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - axcorsrmri 0.0.1 - behavython =0.7.0, =0.3.21, =0.1.5, =0.29.0, =2.11.0rc1, =2.11.0rc1, =2.11.0rc1, =2.11.0rc2 - tensorflow-text 2.10.0rc0 Source...

adpred (1.3.2), ads-and (>=0.1.0, <=0.1.3) +98 more potentially affected by CVE-2026-12570 via keras (>=3.0.0, <=3.14.1)

keras PYPI version =3.0.0, =0.1.0, =0.1.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =0.5.3, =0.0.1, =0.0.3 and more Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

adpred (1.3.2), ads-and (>=0.1.0, <=0.1.3) +98 more potentially affected by CVE-2026-12570 via keras (>=3.0.0, <=3.14.1)

keras PYPI version =3.0.0, =0.1.0, =0.1.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =0.5.3, =0.0.1, =0.0.3 and more Source cves: CVE-2026-12570 Source advisory: GHSA-74M6-M3XX-3VMJ...

cryoet-deepfinder (0.2.1), cspot (>=1.0.4, <=1.0.16) +9 more potentially affected by CVE-2026-12570 via keras (2.14.0rc0)

keras PYPI version 2.14.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cryoet-deepfinder 0.2.1 - cspot =1.0.4, =2.1.0, =0.4.0, =2.13.0rc0, =2.13.0rc0, =2.13.0rc2 - tensorflow-text 2.12.0rc0 - tfrec-literate 2.10.0rc1...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2026-12570 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2026-12570 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...