10354 matches found
ROOT-APP-PYPI-CVE-2023-6022 CVE-2023-6022 in rootio-prefect - Patched by Root
Root has patched CVE-2023-6022 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-7722 CVE-2026-7722 in rootio-prefect - Patched by Root
Root has patched CVE-2026-7722 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-3515 CVE-2026-3515 in rootio-prefect - Patched by Root
Root has patched CVE-2026-3515 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-8183 CVE-2024-8183 in rootio-prefect - Patched by Root
Root has patched CVE-2024-8183 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
MAL-2026-10992 Malicious code in dev-helper-bg (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce930400319131adb4adf9f442340165a52a3ebd8320c497d1de05a3f896cac3 On import devhelper, devhelper/init.py calls startdecryptor at module top level, which spawns a daemon thread running decryptandrun. That function...
ROOT-APP-PYPI-CVE-2026-25645 CVE-2026-25645 in rootio-requests - Patched by Root
Root has patched CVE-2026-25645 in the rootio-requests package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-47081 CVE-2024-47081 in rootio-requests - Patched by Root
Root has patched CVE-2024-47081 in the rootio-requests package for Root:PyPI. Multiple fixed versions available...
Malicious code in reimagined-broccoli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b417d0787324aa952fe69c59b47f6bea108ab02fd20241a6597c2ee0e6f3d8 The package reimagined-broccoli ships a benign-looking stub at reimaginedbroccoli/main.py that only prints a success message. The tarball also ships...
Malicious code in automatic-octo-invention (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dfb4e3eedab24e355b6d24db6096e6752563e220d28e83ad2cf213fe49fd89 The package ships an 8.6 MB stripped ELF binary at automaticoctoinvention/claw sha256 f6fe45f8fe9081987505af31f0249021a65b558af514f2e4e37340fb3182805...
ROOT-APP-PYPI-CVE-2025-71176 CVE-2025-71176 in rootio-pytest - Patched by Root
Root has patched CVE-2025-71176 in the rootio-pytest package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-49476 CVE-2026-49476 in rootio-soupsieve - Patched by Root
Root has patched CVE-2026-49476 in the rootio-soupsieve package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-6866 CVE-2024-6866 in rootio-flask-cors - Patched by Root
Root has patched CVE-2024-6866 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-39892 CVE-2026-39892 in rootio-cryptography - Patched by Root
Root has patched CVE-2026-39892 in the rootio-cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in rootio-cryptography - Patched by Root
Root has patched GHSA-537c-gmf6-5ccf in the rootio-cryptography package for Root:PyPI. Multiple fixed versions available...
Malicious code in nemopush (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d2958d0307dfe5b73dc1eef5a46e96c25f94ea31a0b4ab8b43a1878d427d2d The package advertises itself as 'A push notification package' but ships an 8.6 MB opaque ELF x86-64 binary named claude and a start.sh wrapper as...
MAL-2026-10864 Malicious code in kimichat (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093 The package presents itself as a 'Python wrapper for the bundled kimichat runtime' and exposes a kimichat-run console script plus kimichat.run...
Malicious code in trongridme (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 04117292d543eae5a1d22c78d8a4507cc196c8770c9fb0a09ae2f9a10a8009d4 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
MAL-2026-10768 Malicious code in trongridev (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2db83ccb7d07bdacd1bdf7c32fbaa2a7fb40d7bd599e315f25265ca4bb9d3c03 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
MAL-2026-10690 Malicious code in qwen-asr-pvt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8b2f6db0443a648cdf03348c8dd9351568469f84b8d61022f1ed1da2a330e The package's pyproject.toml declares an unpinned runtime dependency on transformers4576, a lookalike of the widely used HuggingFace transformers...