face-compare (>=1.0.1, <=1.0.2), pyhand-earth (>=0.0.11, <=1.1.0) potentially affected by CVE-2026-12570 via keras (2.4.2)

keras PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - face-compare =1.0.1, =0.0.11, =1.1.0 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

a2grunnerp (>=0.1.0, <=0.1.8), academic-emotion (0.1.2) +113 more potentially affected by CVE-2026-12570 via keras (2.10.0)

keras PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.0.2, =0.1.0, =7.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2026-12570 Source advisory:...

adpred (1.3.2), ads-and (>=0.1.0, <=0.1.3) +98 more potentially affected by CVE-2026-12570 via keras (>=3.0.0, <=3.14.1)

keras PYPI version =3.0.0, =0.1.0, =0.1.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =0.5.3, =0.0.1, =0.0.3 and more Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2026-12570 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...

accuinsight (1.0.1), aglvq (1.0.0) +85 more potentially affected by CVE-2026-12570 via keras (2.3.1)

keras PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - accuinsight 1.0.1 - aglvq 1.0.0 - aix360 0.2.1 - alfabet 0.0.5 - alphad3m =0.10.0.dev0, =0.0.37, =0.5.9, =0.1.0, =0.5.2, =0.6.2 and more Source cves:...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.9.2, <=0.11.4) +1388 more potentially affected by CVE-2026-12570 via keras (>=1.2.1, <=3.14.1)

keras PYPI version =1.2.1, =0.1.0, =0.9.2, =1.0.1, =0.1.0.dev2, =6.6.0, =0.1.2, =1.1.2, =0.1.0, =0.1.0, =0.3.3 - adversarial-attacks-white-black-box 0.1.7 and more Source cves: CVE-2026-12570 Source advisory: MEND:CVE-2026-12570...

MAL-2026-13681 Malicious code in btcflip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4271f738e49ead6113a249ca949232cad9664db210319a097b56385b1942970 The package advertises itself as an HTTP speed-up library, but on import it archives the user's Monero wallet directory C:\Users\Documents\Monero on...

annotald (1.3.8), caterpillar (>=1.0.0.dev4, <=1.0.0.dev17) potentially affected by CVE-2026-12372 via nltk (2.0.5)

nltk PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald 1.3.8 - caterpillar =1.0.0.dev4, =1.0.0.dev17 Source cves: CVE-2026-12372 Source advisory: OSV:PYSEC-2026-3955...

Malicious code in kotanku (PyPI)

Source: kam193 2281ff1cf735f26084f13f5f3ef5e1d5f9faf8cf06254532e5ee6d27204f52d1 During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-kotanku Reasons based on the campaign: -...

Malicious Package

Overview kotanku is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-13667 Malicious code in kotanku (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2281ff1cf735f26084f13f5f3ef5e1d5f9faf8cf06254532e5ee6d27204f52d1 During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in cubesat-upstream-driver (PyPI)

Source: kam193 d669fdf7584f17d952cec3ed432bdb8f07672b43c3bc42ae68aa2d042d51481b Package appears to abuse PyPI for a CTF-like exercise. It can collect up to all environment variables. The package does not exfiltrate them on its own, suggesting there is another external trigger for that. Originally...

Malicious Package

Overview cubesat-upstream-driver is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in riakcs (PyPI)

Source: kam193 3dada3cec22fb43bb528b8f4f7173bb346b25e373eaeb719af2df48698119240 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

conda-store (>=2024.6.1, <=2024.11.2), cylc-uiserver (>=0.1.0, <=0.3.0) +29 more potentially affected by CVE-2026-54338 via jupyterhub (>=0.8.1, <=5.4.6)

jupyterhub PYPI version =0.8.1, =2024.6.1, =0.1.0, =0.0.4, =1.3.7, =0.1.0, =0.2.0, =1.0.0, =1.0.0, =0.2.0, =0.11.0, =0.1.0, =0.0.0, =0.1.3, =0.1.5 - kbatch-proxy 0.4.2 and more Source cves: CVE-2026-54338 Source advisory: MEND:CVE-2026-54338...

chellow (>=1688456919.0.0, <=1692616986.0.0), cybrex (>=1.0.1, <=1.0.7) potentially affected by CVE-2026-71870 via pypdf (3.12.0)

pypdf PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chellow =1688456919.0.0, =1.0.1, =1.0.7 Source cves: CVE-2026-71870 Source advisory: OSV:GHSA-FP3F-MC75-235C...

iiiflow (>=0.1.0, <=1.3.2), mayan-edms (>=4.5.0, <=4.5.8) potentially affected by CVE-2026-71870 via pypdf (3.14.0)

pypdf PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - iiiflow =0.1.0, =4.5.0, =4.5.8 Source cves: CVE-2026-71870 Source advisory: OSV:GHSA-FP3F-MC75-235C...

aiexec-base (0.6.4), ano-code (>=0.1.6, <=0.1.11) +39 more potentially affected by CVE-2026-71870 via pypdf (5.1.0)

pypdf PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiexec-base 0.6.4 - ano-code =0.1.6, =0.0.1, =1.0.0, =0.6.0, =0.0.3, =0.1.0, =0.3.1, =3.3.6, =1.0.16, =0.2.37, =1.0.0, =0.1.11, =0.1.24 and more Sourc...

py40kie (>=0.1.0, <=0.2.2) potentially affected by CVE-2026-71852 via pypdf (3.12.2)

pypdf PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - py40kie =0.1.0, =0.2.2 Source cves: CVE-2026-71852 Source advisory: OSV:GHSA-FWG2-594C-JP42...

indico (>=3.2.6, <=3.2.9) potentially affected by CVE-2026-71852 via pypdf (3.12.1)

pypdf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - indico =3.2.6, =3.2.9 Source cves: CVE-2026-71852 Source advisory: OSV:GHSA-FWG2-594C-JP42...