auto-dl (0.1.1), azureml-contrib-brainwave (>=0.1.57, <=1.0.33) +8 more potentially affected by CVE-2026-12570 via keras (2.1.5)

keras PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - auto-dl 0.1.1 - azureml-contrib-brainwave =0.1.57, =1.0.0, =0.1.2, =0.2.0, =1.0.0, =2.0.4, =0.1.0, =0.1.1 Source cves: CVE-2026-12570 Source advisory:...

lkmeans (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-12570 via keras (2.13.1rc0)

keras PYPI version 2.13.1rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - lkmeans =0.0.1, =0.0.2 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

animl (>=1.1.2, <=1.1.4), annopro (>=0.1.0rc1, <=0.2.0) +64 more potentially affected by CVE-2026-12570 via keras (2.6.0)

keras PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - animl =1.1.2, =0.1.0rc1, =0.47.0, =1.0.1, =0.0.3, =2.2.0, =2.4.1, =1.0.0rc1, =4.5.2, =0.48.1, =1.1.3, =0.2.4, =0.0.1, =0.0.2 and more Source cves:...

a62-emotion (>=0.9.2, <=0.10.10), acuitylite (>=6.27.0, <=6.36.0) +315 more potentially affected by CVE-2026-12570 via keras (2.15.0)

keras PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.9.2, =6.27.0, =0.0.1, =1.1.0, =0.20.0, =0.1.0, =0.9.8, =0.2.0, =0.5.0 - apalysis 0.0.2 - arctic-charr-matcher 0.1.4 and more Source...

face-compare (>=1.0.1, <=1.0.2), pyhand-earth (>=0.0.11, <=1.1.0) potentially affected by CVE-2026-12570 via keras (2.4.2)

keras PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - face-compare =1.0.1, =0.0.11, =1.1.0 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

autotsf (>=0.0.5, <=0.0.8), carla-recourse (>=0.0.4, <=0.0.5) +15 more potentially affected by CVE-2026-12570 via keras (2.3.0)

keras PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - autotsf =0.0.5, =0.0.4, =1.0.0, =0.0.1, =0.4.2rc0, =0.4.1, =0.2.4, =0.6.4, =0.6.7 and more Source cves: CVE-2026-12570 Source advisory:...

genet (>=0.11.0, <=0.17.2), mup-tf (0.0.3) +4 more potentially affected by CVE-2026-12570 via keras (2.11.0rc3)

keras PYPI version 2.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - genet =0.11.0, =2.10.0rc1, =2.10.0rc1, =2.10.0rc1, =2.11.0rc0 - tensorflow-text 2.9.0rc1 Source cves: CVE-2026-12570 Source advisory:...

aigarmic (>=1.0.0, <=1.0.1), albedo (0.1.0) +129 more potentially affected by CVE-2026-12570 via keras (2.14.0)

keras PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aigarmic =1.0.0, =0.40.4, =0.0.0, =0.30.5, =0.3.0, =0.1.0, =0.1.0, =3.0.2, =2.0.0, =1.0.0rc1, =0.0.7, =1.3.1 and more Source cves: CVE-2026-12570...

accuinsight (1.0.1), aglvq (1.0.0) +85 more potentially affected by CVE-2026-12570 via keras (2.3.1)

keras PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - accuinsight 1.0.1 - aglvq 1.0.0 - aix360 0.2.1 - alfabet 0.0.5 - alphad3m =0.10.0.dev0, =0.0.37, =0.5.9, =0.1.0, =0.5.2, =0.6.2 and more Source cves:...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2026-12570 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

adpred (>=1.1.2, <=1.2.7), aeronet (>=0.0.8, <=0.0.18) +57 more potentially affected by CVE-2026-12570 via keras (2.2.4)

keras PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.1.2, =0.0.8, =0.2.7, =0.0.1, =0.2.0rc0, =0.0.1, =0.1.3, =0.2.3, =1.1.0, =0.1.0, =0.0.4, =0.65.0, =0.66.0 and more Source cves: CVE-2026-1257...

adversarial-attacks-white-black-box (0.1.7), aimlops-sentiment-model (0.0.1) +90 more potentially affected by CVE-2026-12570 via keras (2.13.1)

keras PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-attacks-white-black-box 0.1.7 - aimlops-sentiment-model 0.0.1 - aisquared =0.3.0, =0.0.14, =0.0.2, =0.1.3, =0.1.6, =0.0.1, =0.0.0, =0.0.4...

adversarial-friend (1.1.8), agrothon (>=1.1.5, <=1.3.2) +43 more potentially affected by CVE-2026-12570 via keras (2.4.3)

keras PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adversarial-friend 1.1.8 - agrothon =1.1.5, =2.1.0, =0.0.6, =0.1.2.dev0, =0.1.0, =0.0.1.dev0, =0.0.6, =0.0.2, =0.1.3, =0.7.0, =1.4.0 and more Source...

aggmap (>=1.1.1, <=1.2.1), ai-music-remixer (3.0.0) +114 more potentially affected by CVE-2026-12570 via keras (2.10.0rc1)

keras PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aggmap =1.1.1, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.1.1, =0.1.9 - automea 0.0.13 - avici 1.0.5 - basic-pitch 0.2.3 and more...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2026-12570 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2026-12570 Sourc...

a2grunnerp (>=0.1.0, <=0.1.8), academic-emotion (0.1.2) +113 more potentially affected by CVE-2026-12570 via keras (2.10.0)

keras PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.0.2, =0.1.0, =7.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2026-12570 Source advisory:...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.9.2, <=0.11.4) +1389 more potentially affected by CVE-2026-12570 via keras (>=1.2.1, <=3.14.1)

keras PYPI version =1.2.1, =0.1.0, =0.9.2, =1.0.1, =0.1.0.dev2, =6.6.0, =0.1.2, =1.1.2, =0.1.0, =0.1.0, =0.3.3 - adversarial-attacks-white-black-box 0.1.7 and more Source cves: CVE-2026-12570 Source advisory: MEND:CVE-2026-12570...

MAL-2026-13681 Malicious code in btcflip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4271f738e49ead6113a249ca949232cad9664db210319a097b56385b1942970 The package advertises itself as an HTTP speed-up library, but on import it archives the user's Monero wallet directory C:\Users\Documents\Monero on...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-12372 via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-12372 Source advisory: OSV:PYSEC-2026-3955...

Malicious code in kotanku (PyPI)

Source: kam193 2281ff1cf735f26084f13f5f3ef5e1d5f9faf8cf06254532e5ee6d27204f52d1 During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-kotanku Reasons based on the campaign: -...