10665 matches found
ROOT-APP-PYPI-CVE-2026-46338 CVE-2026-46338 in pymdown-extensions - Patched by Root
Root has patched CVE-2026-46338 in the pymdown-extensions package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-47874 CVE-2024-47874 in starlette - Patched by Root
Root has patched CVE-2024-47874 in the starlette package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48710 CVE-2026-48710 in starlette - Patched by Root
Root has patched CVE-2026-48710 in the starlette package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-42561 CVE-2026-42561 in python-multipart - Patched by Root
Root has patched CVE-2026-42561 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
Malicious code in faiss-cpu-avx512 (PyPI)
[email protected] through 1.9.7 on PyPI impersonates faiss-cpu and ships no FAISS code: faisscpuavx512/init.py fetchnative downloads an xz-compressed binary from https://files.catbox.moe/ ffoa50.xz in 1.9.0 to 1.9.3, 0oreqo.xz in 1.9.4, vwfr94.xz in 1.9.5, 3l3x0v.xz in 1.9.6, weu5u2.xz in...
MAL-2026-16143 Malicious code in chroma-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c415e6cd4e653006225dd54672dd79ef076166a2015fa33bbf8f10b789af55 The distribution installs a.pth file that Python auto-executes at interpreter startup on every process using the environment. The.pth file's executab...
Malicious code in chroma-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c415e6cd4e653006225dd54672dd79ef076166a2015fa33bbf8f10b789af55 The distribution installs a.pth file that Python auto-executes at interpreter startup on every process using the environment. The.pth file's executab...
Malicious code in python-fork (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd1d960319085a4aee1c389c4b394bfddd03f3c2af57f4d09bce88f9ad4a66d The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...
MAL-2026-16142 Malicious code in python-fork (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd1d960319085a4aee1c389c4b394bfddd03f3c2af57f4d09bce88f9ad4a66d The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...
Command Injection
Overview projen is a CDK for software projects Affected versions of this package are vulnerable to Command Injection in the task synthesis, which interpolates configuration properties and auto-discovered file names into the generated .projen/tasks.json without escaping shell metacharacters,...
MAL-2026-16131 Malicious code in aitextutils-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70c1bd80ce0363cc25271a25e742ebe8c4346c872456f78b1ac039ef4641a67 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...
Malicious code in aitextutils-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70c1bd80ce0363cc25271a25e742ebe8c4346c872456f78b1ac039ef4641a67 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...
MAL-2026-16130 Malicious code in aitextkit-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e96f519e8acba48a6f7760b37a9ad70b94bfbf79fb5eac4fc682849b2837e3 The package presents itself as a small text-cleaning utility library, but both shipped implementation modules text.py and system.py consist of a...
Malicious code in aitextkit-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e96f519e8acba48a6f7760b37a9ad70b94bfbf79fb5eac4fc682849b2837e3 The package presents itself as a small text-cleaning utility library, but both shipped implementation modules text.py and system.py consist of a...
Malicious code in pymem-win (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c611131ac135f4608698ce56eebd7dc89623b591510a050f2059369c9d51bbf Pymem-win is a near-verbatim copy of the legitimate upstream Pymem package reusing its description, repository URL github.com/srounet/Pymem, and auth...
MAL-2026-16128 Malicious code in pymem-win (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c611131ac135f4608698ce56eebd7dc89623b591510a050f2059369c9d51bbf Pymem-win is a near-verbatim copy of the legitimate upstream Pymem package reusing its description, repository URL github.com/srounet/Pymem, and auth...
MAL-2026-16127 Malicious code in eth-account-web3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b69dc345e5f7b75dbe6dccaf3dfc013a98e302176130aac064cbd8d042bae7 The distribution eth-account-web3 installs under the import name ethaccount, colliding with the legitimate ethereum/eth-account library. On import,...
Malicious code in lucy-python-script-2030 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2195ea343abdb1205451fc7c778bdd1580cf985461949081852e9e82363ac389 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...