hate_crack v2.14.0

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

Not Failing Securely ('Failing Open')

Overview jupyterlab is a JupyterLab computational environment. Affected versions of this package are vulnerable to Not Failing Securely 'Failing Open' in the install function of PyPIExtensionManager when the allowlist/blocklist check is not properly enforced due to a missing await. An attacker ca...

ROOT-APP-PYPI-CVE-2026-7722 CVE-2026-7722 in rootio-prefect - Patched by Root

Root has patched CVE-2026-7722 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-3515 CVE-2026-3515 in rootio-prefect - Patched by Root

Root has patched CVE-2026-3515 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...

MAL-2026-10992 Malicious code in dev-helper-bg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce930400319131adb4adf9f442340165a52a3ebd8320c497d1de05a3f896cac3 On import devhelper, devhelper/init.py calls startdecryptor at module top level, which spawns a daemon thread running decryptandrun. That function...

ROOT-APP-PYPI-CVE-2026-25645 CVE-2026-25645 in rootio-requests - Patched by Root

Root has patched CVE-2026-25645 in the rootio-requests package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-47081 CVE-2024-47081 in rootio-requests - Patched by Root

Root has patched CVE-2024-47081 in the rootio-requests package for Root:PyPI. Multiple fixed versions available...

PT-2026-71454

Name of the Vulnerable Software and Affected Versions JupyterLab versions 4.6.0 through 4.6.1 JupyterLab versions 4.5.0 through 4.5.9 Description An enforcement gap exists in the PyPIExtensionManager.install function due to a missing await keyword, which prevents the is install allowed coroutine...

PT-2026-67355

JupyterLab's PyPI extension manager enforces blocked extensions uris by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as...

PT-2026-71917

Name of the Vulnerable Software and Affected Versions jupyterlab versions 4.5.0 through 4.5.9 jupyterlab versions 4.6.0 through 4.6.1 Description The PyPI extension manager in JupyterLab fails to properly enforce blocked extensions uris because it uses a custom normalization process that is weake...

Malicious code in tprelibpost (PyPI)

Source: checkmarx eef860542870f41cd93fe5dce25dfa9e6476b898889f085fc1f522955bbcac6e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...

Malicious code in pollow (PyPI)

--- Credit: OpenSSF source...

Malicious code in minecc (PyPI)

Source: checkmarx 346324e80b7fdd082fd9c18592544f6f9f0e19e036d4f8ea73ecf1274e7ab426 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...

Malicious code in libpywramgrand (PyPI)

Source: checkmarx 416f5a7ac259bc6371a0966dde66e31e7497662085958c78cadfa7bc72919b6a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...

Malicious code in libcandyintelvisa (PyPI)

Source: checkmarx 1a66d5d6fc74aa2df237c71269e7db605de1bc9e1d80b7678867bc3ee63f8f87 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...

Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI)

Source: kam193 3b948e846f1817c6c72336ef38aac1149d25e0e40dc903eef60f7af4f3625e1f According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the only purpose reporting basic data like hostname and curren...

Malicious code in freqrtade (PyPI)

Source: checkmarx 2eb06d045df3e6b25dc541a29a6b78951722c0b8b6d5e3596e1becf0c64301cd Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet addresses --- Credit: OpenSSF source...

Malicious code in esqstringramgui (PyPI)

Source: checkmarx 3d945c815717e70dad051c66a2654794041dd4e3405fe438e703518a890788e0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...

Malicious code in controlpyw (PyPI)

Source: checkmarx 03f7ff3cfefa377068ddd81f6d4d3adc7354e4c83335e25e4063b7863534cee7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...

Malicious code in c8tks94kspjghtb (PyPI)

Source: kam193 9182e332ef5bf851522bb14086c5159f1c606fb90094722f856c87f36e382da7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...