MAL-2025-979 Malicious code in sajadninja (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-980 Malicious code in sajadninja-sajad (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-978 Malicious code in sajadnewninja (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sajadninja-sajad (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-967 Malicious code in reqest-dexfree (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-957 Malicious code in pyethereum2345 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-952 Malicious code in prime-math (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-943 Malicious code in lransrlasn (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-924 Malicious code in fgh (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-921 Malicious code in eth-web3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-903 Malicious code in breqest (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-899 Malicious code in alrsnlaseast (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-898 Malicious code in account-eth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

PyPI Introduces Archival Status to Alert Users About Unmaintained Python Packages

The maintainers of the Python Package Index PyPI registry have announced a new feature that allows package developers to archive a project as part of efforts to improve supply chain security. "Maintainers can now archive a project to let users know that the project is not expected to receive any...

GHSA-GVVW-RR8M-FJ76 uniapi version 1.0.7 contained an information harvesting script.

uniapi version 1.0.7 introduces code that would execute on import of the module and download a script from a remote URL, and would then execute the downloaded script in a thread. The downloaded script would harvest system information and POST the information to another remote URL. This code was...

uniapi version 1.0.7 contained an information harvesting script.

uniapi version 1.0.7 introduces code that would execute on import of the module and download a script from a remote URL, and would then execute the downloaded script in a thread. The downloaded script would harvest system information and POST the information to another remote URL. This code was...

MAL-2025-1994 Malicious code in requesttss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 12a8bc9313963cfa671547d93bfa32236afe6b7dfeeec048633a547aa05dbc12 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

Malicious code in reque (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ce48406d7fce137de7e9a500179d7d6fcc5857714587372c977c5d6793cad30 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1989 Malicious code in reque (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ce48406d7fce137de7e9a500179d7d6fcc5857714587372c977c5d6793cad30 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

PYSEC-2025-2 uniapi version 1.0.7 contained an information harvesting script.

uniapi version 1.0.7 introduces code that would execute on import of the module and download a script from a remote URL, and would then execute the downloaded script in a thread. The downloaded script would harvest system information and POST the information to another remote URL. This code was...