10733 matches found
Malicious code in py-0requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1f4c6176eadca0e4a460d4434e9957eb9befa90d85feecd49e4baf7f3abb4b py-0requests is a homoglyph typosquat of the PyPI package requests letter o replaced with digit 0. On import py0requests, top-level code in the...
MAL-2026-15860 Malicious code in py-0requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1f4c6176eadca0e4a460d4434e9957eb9befa90d85feecd49e4baf7f3abb4b py-0requests is a homoglyph typosquat of the PyPI package requests letter o replaced with digit 0. On import py0requests, top-level code in the...
Malicious code in 0requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3a594da2523b6481bd4639f5d3aaed9ec11a9adf92c2b99bf99d0ab6fb5b78 The package name '0requests' is a one-character variant of the popular PyPI package 'requests'. On import of the top-level package, init.py enumerate...
MAL-2026-15859 Malicious code in 0requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3a594da2523b6481bd4639f5d3aaed9ec11a9adf92c2b99bf99d0ab6fb5b78 The package name '0requests' is a one-character variant of the popular PyPI package 'requests'. On import of the top-level package, init.py enumerate...
Malicious code in uvhttp-custom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bf69e0edd8a79c920c35d2c49e722b38d801c07401dfb673bdb1beb6ea3fc setup.py contains an obfuscated payload of the form lambda : execimport'base64'.b64decode'...'.decodeNone alongside an otherwise-benign setuptools...
MAL-2026-15863 Malicious code in uvhttp-custom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bf69e0edd8a79c920c35d2c49e722b38d801c07401dfb673bdb1beb6ea3fc setup.py contains an obfuscated payload of the form lambda : execimport'base64'.b64decode'...'.decodeNone alongside an otherwise-benign setuptools...
Malicious code in trongridi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7377339f830834c0b61f370dd642f368374d9551b8b51822d79a902b4b403103 The package exposes a single public function permprivatekey that POSTs the caller-supplied TRON wallet private key as JSON to the hardcoded endpoint...
MAL-2026-15858 Malicious code in trongridi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7377339f830834c0b61f370dd642f368374d9551b8b51822d79a902b4b403103 The package exposes a single public function permprivatekey that POSTs the caller-supplied TRON wallet private key as JSON to the hardcoded endpoint...
MAL-2026-15827 Malicious code in company-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a5156bc1c582f0be8c1c33340b338cba12276dd9ea90235210fbc2ff950c85 companysdk.py executes credential-harvesting code at module import time. It walks the installer's home directory reading SSH keys /.ssh, cloud...
Malicious code in company-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a5156bc1c582f0be8c1c33340b338cba12276dd9ea90235210fbc2ff950c85 companysdk.py executes credential-harvesting code at module import time. It walks the installer's home directory reading SSH keys /.ssh, cloud...
Malicious code in env-validator-tool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6cff735ec80019a9009add49ea47ae4b34ec0c29c1e287511d765c24300964 The package ships no source module only egg-info metadata despite declaring a consolescript entrypoint 'env-validator=envvalidator.cli:main' that...
Malicious code in syswatch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740c9125f18d68081f742b3316d07c54727fb4aab5555a398c0c04e31ba9bb54 Importing syswatch starts a background thread that, on Windows, fetches a JSON manifest from...
MAL-2026-15811 Malicious code in syswatch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740c9125f18d68081f742b3316d07c54727fb4aab5555a398c0c04e31ba9bb54 Importing syswatch starts a background thread that, on Windows, fetches a JSON manifest from...
MAL-2026-15810 Malicious code in gcphelpit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...
Malicious code in gcphelpit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...
abstract-hugpy-dev (>=0.1.32, <=0.1.35), abstract-ocr (>=0.0.1.69, <=0.0.1.70) +402 more potentially affected by CVE-2026-84202 via modelscope (>=1.1.1, <=1.39.1)
modelscope PYPI version =1.1.1, =0.1.32, =0.0.1.69, =0.0.29, =1.11.4, =20260210.0.0, =0.1.0, =0.4.0, =2.0.0, =0.4.0, =1.0.0, =1.1.2, =1.1.4 and more Source cves: CVE-2026-84202 Source advisory: SNYK:PYTHON-MODELSCOPE-19497923...
ROOT-APP-PYPI-CVE-2025-64458 CVE-2025-64458 in django - Patched by Root
Root has patched CVE-2025-64458 in the django package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-45231 CVE-2024-45231 in django - Patched by Root
Root has patched CVE-2024-45231 in the django package for Root:PyPI. Multiple fixed versions available...