Malicious code in flasq (PyPI)

Source: kam193 2498f9d207b216ad7438cd262c9136cc5453d288f97a74d4cd44a9a2accf9141 Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

Malicious code in idnna (PyPI)

Source: kam193 c3caa6af02ad3844d721b93e94796fed92506f24517c3b990d741b147eee5acf Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

Malicious code in fast-hashes (PyPI)

Source: kam193 658a96d4157086ae099c38b27ef8fb7d1664956a251f21d55a9d8cb208c0a8fc Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

Malicious code in fastapii (PyPI)

Source: kam193 ccfc3dd07e620dc6bda1b28b4d8f77932ee217aff579270c0e0c74453e215943 Package imitates name of a popula library. During installation, obfuscated code downloads a malicious executable and starts it. It then exfiltrates at least cryptocurrency wallet data, probably more. --- Category:...

annotald (>=1.3.1, <=1.3.7) potentially affected by CVE-2026-12261 via nltk (2.0.4)

nltk PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald =1.3.1, =1.3.7 Source cves: CVE-2026-12261 Source advisory: OSV:GHSA-FFJ6-66C4-86GW...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +926 more potentially affected by CVE-2026-12261 via nltk (>=2.0.4, <=3.9.4)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-12261 Source advisory: MEND:CVE-2026-12261...

Malicious code in alphalend-layouts (PyPI)

Source: amazon-inspector fddd94a1329de9e53295705e2344e18fc7c3620804cbb3cda3c81e7ba0e7727e The package harvests installer-side secrets and uploads them to an attacker-controlled GitHub repository, executing both when pip install alphalend-layouts runs via custom install/develop cmdclass subclasses...

Malicious code in alphalend-abi (PyPI)

Source: kam193 1650b24020e22aac89835e5b8a20b7de20f6479a2ce311d35dd56ab3dc4d6bb1 During import, the package exfiltrates sensitive files with SUI private keys to a private GitHub repository. This action is also triggered on every Python startup due to leveraging PTH files. --- Category: MALICIOUS -...

kyoukai (>=2.2.0, <=2.2.1) potentially affected by CVE-2026-71554 via h2 (3.1.0)

h2 PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - kyoukai =2.2.0, =2.2.1 Source cves: CVE-2026-71554 Source advisory: OSV:GHSA-6HR6-W5QG-QMWG...

aid-push (>=2.1.0, <=2.1.4), alexa-browser-client (>=0.3.3, <=3.3.2) +46 more potentially affected by CVE-2026-71554 via h2 (2.6.2)

h2 PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aid-push =2.1.0, =0.3.3, =1.3.0, =1.2.0, =0.2.0, =0.7.1.1, =0.0.1, =0.4.0, =17.5.1, =0.1.10, =0.4.10 and more Source cves: CVE-2026-71554 Source advisory:...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +230 more potentially affected by CVE-2026-71554 via h2 (3.2.0)

h2 PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aapns =19.11.0, =0.1.0, =0.0.1, =0.4.0, =0.4.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.6, =0.0.1, =0.1.0, =0.0.1, =0.1.1 and more Source cves:...

aquests (>=0.7.8.5b1, <=0.7.16.18), kyoukai (2.2.1.post1) +1 more potentially affected by CVE-2026-71554 via h2 (3.0.1)

h2 PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aquests =0.7.8.5b1, =0.7.16.18 - kyoukai 2.2.1.post1 - th2c 0.3.1 Source cves: CVE-2026-71554 Source advisory: OSV:GHSA-6HR6-W5QG-QMWG...

aioload (>=0.3.2, <=0.3.3), aiosonic (>=0.5.0, <=0.5.3) +1 more potentially affected by CVE-2026-71554 via h2 (3.1.1)

h2 PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aioload =0.3.2, =0.5.0, =1.2.1, =1.2.3 Source cves: CVE-2026-71554 Source advisory: OSV:GHSA-6HR6-W5QG-QMWG...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +419 more potentially affected by CVE-2026-71554 via h2 (>=2.4.4, <=4.4.0)

h2 PYPI version =2.4.4, =19.11.0, =0.1.0, =0.0.32, =0.0.1, =0.0.1, =0.4.0, =0.4.0, =2.1.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.2, =0.3.6, =0.3.8 and more Source cves: CVE-2026-71554 Source advisory: MEND:CVE-2026-71554...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +72 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.8.2, =0.3.0, =0.6.0 and more Source cves: CVE-2026-18654 Source advisory: OSV:GHSA-HQVF-45JJ-MCCQ...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +72 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.8.2, =0.3.0, =0.6.0 and more Source cves: CVE-2026-18654 Source advisory: GHSA-HQVF-45JJ-MCCQ...

agent-api-server (>=2.1.7, <=2.1.16), alphasix-axiom (>=1.1.3, <=1.1.23) +17 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-postgres (>=3.0.0, <=3.1.0)

langgraph-checkpoint-postgres PYPI version =3.0.0, =2.1.7, =1.1.3, =1.9.0, =0.1.3, =0.1.18, =0.1.57, =0.1.0, =0.8.0, =0.11.1, =0.11.1, =1.0.0.dev7, =1.0.0, =1.0.0.dev7, =3.62.0 and more Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2026-71433...

gtm-onepint (1.2.14), gtm-onepintai (>=1.0.0, <=1.0.3) +1 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-postgres (1.0.0)

langgraph-checkpoint-postgres PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-postgres and may be impacted: - gtm-onepint 1.2.14 - gtm-onepintai =1.0.0, =1.0.9, =1.2.13 Source cves: CVE-2026-71433 Source advisory...

agent-api-server (>=2.1.7, <=2.1.16), alphasix-axiom (>=1.1.3, <=1.1.23) +17 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-postgres (>=3.0.0, <=3.1.0)

langgraph-checkpoint-postgres PYPI version =3.0.0, =2.1.7, =1.1.3, =1.9.0, =0.1.3, =0.1.18, =0.1.57, =0.1.0, =0.8.0, =0.11.1, =0.11.1, =1.0.0.dev7, =1.0.0, =1.0.0.dev7, =3.62.0 and more Source cves: CVE-2026-71433 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINTPOSTGRES-18592348...