cabrita (>=2.2.2b1, <=2.2.2b2), cico (>=0.1.0, <=0.1.8) +4 more potentially affected by CVE-2026-76218 via gitpython (2.1.10)

gitpython PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - cabrita =2.2.2b1, =0.1.0, =0.1.0, =3.11.1, =0.9.0, =0.9.7.2 Source cves: CVE-2026-76218 Source advisory: OSV:GHSA-9RJ7-RF2P-W77R...

elib (>=0.1.55, <=0.1.57), emiz (>=0.1.35, <=2018.4.2.1) +11 more potentially affected by CVE-2026-76219 via gitpython (2.1.8)

gitpython PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elib =0.1.55, =0.1.35, =0.2.4a149, =0.0.1, =1.0.0, =0.4233.0, =0.2354.0, =0.2354.0, =0.1.7, =0.2.120, =1.0.0, =0.1.0, =2.1.1 Source cves:...

gpopt (>=0.1.0, <=0.2.3) potentially affected by CVE-2026-76219 via gitpython (0.3.6)

gitpython PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - gpopt =0.1.0, =0.2.3 Source cves: CVE-2026-76219 Source advisory: OSV:GHSA-4GMW-GG2M-W46P...

cabrita (>=2.2.2b1, <=2.2.2b2), cico (>=0.1.0, <=0.1.8) +4 more potentially affected by CVE-2026-76219 via gitpython (2.1.10)

gitpython PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - cabrita =2.2.2b1, =0.1.0, =0.1.0, =3.11.1, =0.9.0, =0.9.7.2 Source cves: CVE-2026-76219 Source advisory: OSV:GHSA-4GMW-GG2M-W46P...

bento-cli (>=0.1.0, <=0.1.1), walletlib (0.1.0) potentially affected by CVE-2026-76219 via gitpython (2.1.14)

gitpython PYPI version 2.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bento-cli =0.1.0, =0.1.1 - walletlib 0.1.0 Source cves: CVE-2026-76219 Source advisory: OSV:GHSA-4GMW-GG2M-W46P...

android-category (>=0.0.3, <=0.0.4), ant-cli (0.0.1) +34 more potentially affected by CVE-2026-76219 via gitpython (2.1.11)

gitpython PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - android-category =0.0.3, =0.0.2, =0.3.0, =0.0.2, =0.12.4rc1, =0.1.26.dev1542857464, =0.2.3, =0.1.0, =0.0.1, =1.2.5, =0.1.0.0b1, =0.1.3 and mo...

Malicious code in cdktn-provider-azurerm (PyPI)

Source: amazon-inspector e647bdd78382c54b0565b5bde30513112aaebc17e80019da2ebfe1cfe3f9a14e Package name and branding closely mimic HashiCorp's legitimate cdktf-provider-azurerm CDK for Terraform, with a single-character substitution cdktf → cdktn and fabricated 'CDK Terrain' branding at cdktn.io...

Malicious code in speed-hashes (PyPI)

Source: amazon-inspector 120e6126065bccc254b925a6913422c0cbdd201054437820369c2726fd4a2871 setup.py defines a custom install command NativeInstall that runs on pip install. After the normal install step, a base64 literal COMPATPAYLOAD is decoded and passed to execcompile... under cover-story names...

Malicious code in pydanticc (PyPI)

Source: kam193 c16b176d1ba6ee3f4f1680d0678c9933e620f4de18bec7bc9af67978ed737527 Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

Malicious code in flasq (PyPI)

Source: kam193 2498f9d207b216ad7438cd262c9136cc5453d288f97a74d4cd44a9a2accf9141 Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

Malicious code in idnna (PyPI)

Source: kam193 c3caa6af02ad3844d721b93e94796fed92506f24517c3b990d741b147eee5acf Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

Malicious code in fastapii (PyPI)

Source: kam193 ccfc3dd07e620dc6bda1b28b4d8f77932ee217aff579270c0e0c74453e215943 Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

Malicious code in fast-hashes (PyPI)

Source: kam193 658a96d4157086ae099c38b27ef8fb7d1664956a251f21d55a9d8cb208c0a8fc Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

annotald (>=1.3.1, <=1.3.7) potentially affected by CVE-2026-12261 via nltk (2.0.4)

nltk PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald =1.3.1, =1.3.7 Source cves: CVE-2026-12261 Source advisory: OSV:GHSA-FFJ6-66C4-86GW...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +926 more potentially affected by CVE-2026-12261 via nltk (>=2.0.4, <=3.9.4)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-12261 Source advisory: MEND:CVE-2026-12261...

Malicious code in alphalend-layouts (PyPI)

Source: amazon-inspector fddd94a1329de9e53295705e2344e18fc7c3620804cbb3cda3c81e7ba0e7727e The package harvests installer-side secrets and uploads them to an attacker-controlled GitHub repository, executing both when pip install alphalend-layouts runs via custom install/develop cmdclass subclasses...

Malicious code in alphalend-abi (PyPI)

Source: kam193 1650b24020e22aac89835e5b8a20b7de20f6479a2ce311d35dd56ab3dc4d6bb1 During import, the package exfiltrates sensitive files with SUI private keys to a private GitHub repository. This action is also triggered on every Python startup due to leveraging PTH files. --- Category: MALICIOUS -...

aioload (>=0.3.2, <=0.3.3), aiosonic (>=0.5.0, <=0.5.3) +1 more potentially affected by CVE-2026-71554 via h2 (3.1.1)

h2 PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aioload =0.3.2, =0.5.0, =1.2.1, =1.2.3 Source cves: CVE-2026-71554 Source advisory: OSV:GHSA-6HR6-W5QG-QMWG...

kyoukai (>=2.2.0, <=2.2.1) potentially affected by CVE-2026-71554 via h2 (3.1.0)

h2 PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - kyoukai =2.2.0, =2.2.1 Source cves: CVE-2026-71554 Source advisory: OSV:GHSA-6HR6-W5QG-QMWG...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +232 more potentially affected by CVE-2026-71554 via h2 (3.2.0)

h2 PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aapns =19.11.0, =0.1.0, =0.0.1, =0.4.0, =0.4.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.6, =0.0.1, =0.1.0, =0.0.1, =0.1.1 and more Source cves:...