10848 matches found
MAL-2025-191906 Malicious code in tonetext (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c46725ad6c88079cce4f7fa4a29175fec7f78ea83344da99d0f02ac4f020fcf3 When imported, the code embedded into the exception class downloads a remote file, and runs it by importing, and attempts to cover tracks by overwriting itself...
MAL-2025-3439 Malicious code in ccxt-mexc-futures (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f2eb5eb75679b536c430ad6d5440e63fbe1d1cd391ab1abf2a411dae3a768ed8 There is a hidden code that overwrites the default method and downloads remote data, which contains the dictionary pretending to be the right value, and a hidd...
MAL-2025-3008 Malicious code in tlsclient3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 612e1a598a61304a9ae3550acb835ef5962f596bb74e857c2a035ba090e57dc4 Obfuscated code starts a multi-stage infection --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
This Malicious PyPI Package Stole Ethereum Private Keys via Polygon RPC Transactions
Cybersecurity researchers have discovered a malicious Python package on the Python Package Index PyPI repository that's equipped to steal a victim's Ethereum private keys by impersonating popular libraries. The package in question is set-utils, which has received 1,077 downloads to date. It's no...
adbdgl-adapter (>=1.0.0, <=3.0.1), alignn (>=2021.9.29, <=2025.4.1) +94 more potentially affected by unknown CVE via dgl (>=0.5.3, <=2.2.1)
dgl PYPI version =0.5.3, =1.0.0, =2021.9.29, =2022.10.23, =0.0.4, =1.0.0a2, =0.1.0, =1.0.21, =0.1.1, =1.0.0b3, =0.0.1, =0.2.0, =0.0.1, =0.1.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DGL-9295806...
MAL-2025-2957 Malicious code in enquiry-exam (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 590114fe4174abb1ff72c06bf128aef53bd76a67eaeca5d5e891be001f6b0c17 Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...
MAL-2025-2152 Malicious code in certifications (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7d51c9defecdd382c5048eb6f92b32558355b8457b2b5cd63f3d86e12e8ed35b Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...
MAL-2025-2993 Malicious code in pythonhttp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3ed5759c2260c5467724f053f3d59eac62f5491fc2d03350fef0a6f832652e3b Installing the package starts a heavily obfuscated Powershell Script that attempts to at least overwrite copied crypto wallets --- Category: MALICIOUS - The...
GHSA-VR75-HJH9-7FR6 Duplicate Advisory: Remote Code Execution via Malicious Pickle File Bypassing Static Analysis
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-655q-fx9r-782v. This link is maintained to preserve external references. Original Description picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that use...
adversarial-attacks-white-black-box (0.1.7), americodraws (>=0.1.0, <=0.1.5) +105 more potentially affected by CVE-2025-25302 via rembg (>=2.0.57, <=2.0.83)
rembg PYPI version =2.0.57, =0.1.0, =0.0.64, =0.3.3, =0.1.0, =0.4.0, =0.1.0, =0.1.4 - cinewiz 2.0.0 and more Source cves: CVE-2025-25302 Source advisory: SNYK:PYTHON-REMBG-9296365...
adversarial-attacks-white-black-box (0.1.7), americodraws (>=0.1.0, <=0.1.5) +105 more potentially affected by CVE-2025-25301 via rembg (>=2.0.57, <=2.0.83)
rembg PYPI version =2.0.57, =0.1.0, =0.0.64, =0.3.3, =0.1.0, =0.4.0, =0.1.0, =0.1.4 - cinewiz 2.0.0 and more Source cves: CVE-2025-25301 Source advisory: SNYK:PYTHON-REMBG-9296372...
MAL-2025-2013 Malicious code in xuiniadb (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2007 Malicious code in useragents (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2003 Malicious code in tronwebpy (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2002 Malicious code in tronpyweb (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2001 Malicious code in tronpynet (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2000 Malicious code in tronnetpy (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1999 Malicious code in tronlinkpy (PyPI)
--- -= Per source details. Do not edit below this line.=-...