thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53505 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53505 Source advisory: OSV:GHSA-PHJ3-59PF-CP83...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53504 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53504 Source advisory: GHSA-5VJC-7CXW-4W6J...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53504 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53504 Source advisory: OSV:GHSA-5VJC-7CXW-4W6J...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53504 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53504 Source advisory: SNYK:PYTHON-THUMBOR-18507988...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53504 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53504 Source advisory: MEND:CVE-2026-53504...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53503 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53503 Source advisory: OSV:GHSA-CQJP-JF4R-H5Q9...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53503 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53503 Source advisory: SNYK:PYTHON-THUMBOR-18507985...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53503 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53503 Source advisory: MEND:CVE-2026-53503...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53501 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53501 Source advisory: SNYK:PYTHON-THUMBOR-18507989...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53501 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53501 Source advisory: OSV:GHSA-MW3H-QJXJ-6XG9...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53501 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53501 Source advisory: MEND:CVE-2026-53501...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53500 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53500 Source advisory: OSV:GHSA-6X26-6R6F-M537...

thumbor-piliptc-engine (>=7.4.7.3, <=7.4.7.4) potentially affected by CVE-2026-53500 via thumbor (7.4.7)

thumbor PYPI version 7.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on thumbor and may be impacted: - thumbor-piliptc-engine =7.4.7.3, =7.4.7.4 Source cves: CVE-2026-53500 Source advisory: MEND:CVE-2026-53500...

Malicious code in asdk-plugin-alphagen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d3479f5a67e780468835828895609215d82aa5a273dfc152e4bae5a12f21a245 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +926 more potentially affected by CVE-2026-12075 via nltk (>=2.0.4, <=3.9.4)

nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-12075 Source advisory: MEND:CVE-2026-12075...

annotald (>=1.3.1, <=1.3.7) potentially affected by CVE-2026-12072 via nltk (2.0.4)

nltk PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald =1.3.1, =1.3.7 Source cves: CVE-2026-12072 Source advisory: OSV:GHSA-6HM5-JGCP-P838...

Malicious code in walmart-genai-trace (PyPI)

Source: kam193 7e84b4bbb5660ea5c7f803c4e5d0b12dfe41c9bb147fd2228c72bdda2224291a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in aiprepkit (PyPI)

Source: kam193 7a5376398cb81f79bf581819bf1f7fad54a6e3feaaa7ded6d3b418d4562c47d5 In this campaign, some packages e.g. cognikit, aiassistcore are pulled as dependencies and contain the C2 configuration and the malicious functionality, while others like aichannel provide fake functionality and...

Malicious code in cognikit (PyPI)

Source: kam193 e0cdc137d19f19df47efa6fae6d52ec6eda48eb2f1915ac4eb77787956d10aba In this campaign, some packages e.g. cognikit, aiassistcore are pulled as dependencies and contain the C2 configuration and the malicious functionality, while others like aichannel provide fake functionality and...

Malicious code in catalogai (PyPI)

Source: kam193 ebd7348ccf6d30158d05df90e15ebba938c30119c83b2ce6679cd69068dc667b In this campaign, some packages e.g. cognikit, aiassistcore are pulled as dependencies and contain the C2 configuration and the malicious functionality, while others like aichannel provide fake functionality and...