Malicious code in reimagined-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b417d0787324aa952fe69c59b47f6bea108ab02fd20241a6597c2ee0e6f3d8 The package reimagined-broccoli ships a benign-looking stub at reimaginedbroccoli/main.py that only prints a success message. The tarball also ships...

Malicious code in automatic-octo-invention (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dfb4e3eedab24e355b6d24db6096e6752563e220d28e83ad2cf213fe49fd89 The package ships an 8.6 MB stripped ELF binary at automaticoctoinvention/claw sha256 f6fe45f8fe9081987505af31f0249021a65b558af514f2e4e37340fb3182805...

ROOT-APP-PYPI-CVE-2025-71176 CVE-2025-71176 in rootio-pytest - Patched by Root

Root has patched CVE-2025-71176 in the rootio-pytest package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-49476 CVE-2026-49476 in rootio-soupsieve - Patched by Root

Root has patched CVE-2026-49476 in the rootio-soupsieve package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6866 CVE-2024-6866 in rootio-flask-cors - Patched by Root

Root has patched CVE-2024-6866 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6839 CVE-2024-6839 in rootio-flask-cors - Patched by Root

Root has patched CVE-2024-6839 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...

Malicious code in nemopush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d2958d0307dfe5b73dc1eef5a46e96c25f94ea31a0b4ab8b43a1878d427d2d The package advertises itself as 'A push notification package' but ships an 8.6 MB opaque ELF x86-64 binary named claude and a start.sh wrapper as...

MAL-2026-10864 Malicious code in kimichat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093 The package presents itself as a 'Python wrapper for the bundled kimichat runtime' and exposes a kimichat-run console script plus kimichat.run...

Malicious code in trongridme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 04117292d543eae5a1d22c78d8a4507cc196c8770c9fb0a09ae2f9a10a8009d4 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2026-10768 Malicious code in trongridev (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2db83ccb7d07bdacd1bdf7c32fbaa2a7fb40d7bd599e315f25265ca4bb9d3c03 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2026-10690 Malicious code in qwen-asr-pvt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8b2f6db0443a648cdf03348c8dd9351568469f84b8d61022f1ed1da2a330e The package's pyproject.toml declares an unpinned runtime dependency on transformers4576, a lookalike of the widely used HuggingFace transformers...

Malicious code in northstart-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa58bcfb4f89faf624c1f99bb552e597cc2e061330a2e98e72e6f401bb70b4f9 The pypi package northstart-sdk 0.2.1 executes attacker-controlled code as a side effect of import northstartsdk. The top-level init.py assigns...

CVE-2026-52869: Authorization Bypass Through User-Controlled Key

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to 1.27.2, the SSE and stateful Streamable HTTP transports mcp.server.sse.SseServerTransport and mcp.server.streamablehttpmanager.StreamableHTTPSessionManager route requests to existing...

ROOT-APP-PYPI-CVE-2025-68146 CVE-2025-68146 in rootio-filelock - Patched by Root

Root has patched CVE-2025-68146 in the rootio-filelock package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-22701 CVE-2026-22701 in rootio-filelock - Patched by Root

Root has patched CVE-2026-22701 in the rootio-filelock package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-62727 CVE-2025-62727 in rootio-starlette - Patched by Root

Root has patched CVE-2025-62727 in the rootio-starlette package for Root:PyPI. Multiple fixed versions available...

125softnlp (0.0.1), a2 (>=0.10.11, <=0.10.13) +4971 more potentially affected by CVE-2026-12482 via keras (>=1.2.1, <=3.15.1)

keras PYPI version =1.2.1, =0.10.11, =0.1.0, =0.0.0, =0.9.2, =0.5.0, =1.0.0, =0.0.1, =0.2.0, =0.6.0, =0.1.0, =0.1.0, =0.2.0 - academic-emotion 0.1.2 and more Source cves: CVE-2026-12482 Source advisory: SNYK:PYTHON-KERAS-17971535...

aap-core (0.2.0), aap-dspy (>=0.1.1.dev1, <=0.2.0) +1693 more potentially affected by CVE-2026-15605 via wandb (>=0.8.36, <=0.30.0)

wandb PYPI version =0.8.36, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.2.0a0, =1.2.0, =0.1.0, =0.0.1, =0.3.3, =0.0.1, =0.1.0, =0.0.9, =0.1.2 and more Source cves: CVE-2026-15605 Source advisory: SNYK:PYTHON-WANDB-17966703...

EUVD-2026-43262

A vulnerability was found in usestrix strix up to 1.0.2. This affects an unknown function of the file systemprompt.jinja of the component PyPI Handler. Performing a manipulation results in inclusion of functionality from untrusted control sphere. The attack is possible to be carried out remotely...

CVE-2026-15519: Inclusion of Functionality from Untrusted Control Sphere

A vulnerability was found in usestrix strix up to 1.0.2. This affects an unknown function of the file systemprompt.jinja of the component PyPI Handler. Performing a manipulation results in inclusion of functionality from untrusted control sphere. The attack is possible to be carried out remotely...