MAL-2025-2933 Malicious code in akangatu (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2932 Malicious code in aiphttp (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2928 Malicious code in acapy-agent-didx (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2926 Malicious code in 3-0 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2927 Malicious code in 7-0 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

fprime-ci (0.0.1a1), fprime-fpy (>=0.0.1a1, <=0.3.2) +1 more potentially affected by CVE-2024-55029 via fprime-gds (4.3.0)

fprime-gds PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on fprime-gds and may be impacted: - fprime-ci 0.0.1a1 - fprime-fpy =0.0.1a1, =0.1.0, =0.1.5 Source cves: CVE-2024-55029 Source advisory: SNYK:PYTHON-FPRIMEGDS-9749311...

MAL-2025-3461 Malicious code in quickcolors (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 05deb6781dc1a1781e9a811200127704052a70029ade2a3e97f2c010d9453fc2 Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...

MAL-2025-3444 Malicious code in coloryi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7fda5ee85e248eb4ab426d18592fa9703ff19567ed041d3d75740a231464152d Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...

MAL-2025-3462 Malicious code in quicolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4b11a81f135d7d2ac414b7144af73523d15db7b0ce1a2757ba6ba95f50bf0be8 Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...

Malicious code in f2d5cfdc642c3d4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7996c4b5f5093de9bc2646228bce15683af10ede7957a934c5afa67346f1149d During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3431 Malicious code in bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4da60ab5fd2248194d9c485e99360f30cd77d89de065b6f30259328cfcadd2f2 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3447 Malicious code in f2d5cfdc642c3d5 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea846c355b07f5a44c9e9add5eccd50fcf359359f6fdc49de3f7b696697b87c2 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3435 Malicious code in bbllaacckkwwoollff6ad8f762 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4d90faddd66012c6f6fadc95f0a0e846b70504ed6ea47a65576ef5c4067a4985 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3430 Malicious code in bbllaacckkwwoollff (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2507dd4c5b3b3c1fae3213243ff0a27b71955dfbb39069f677660e025ac08f0d During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3440 Malicious code in codeoptimizer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7ae236bbeace8d7b056d4827059bc1f4b6314e57e75827ce5a980ac9dfb991c2 On importing the module, there is an automated start of a Telegram bot capable of exfiltrating passwords from browsers, executing arbitrary commands and so on...

MAL-2025-3484 Malicious code in yolov8mini (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a9222d20b84ed716d5bdf81f1da1d0f088fc7482894c8f25a5d1f757cc477ba9 On importing the module, there is an automated start of a Telegram bot capable of exfiltrating passwords from browsers, executing arbitrary commands and so on...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8551 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8551 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511377...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8487 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8487 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511372...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8438 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8438 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511412...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8501 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8501 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511413...