Malicious code in scrambleeeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65599e4b6ca9e8349fbde07e578e53844af217c6eca15dcd6bb99c8a1fa63f Package advertises a trivial string-shuffle utility, but its exported function scrambleeeer opens a TCP socket to bax.h4x.tv:6363, duplicates...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +2053 more potentially affected by CVE-2026-72848 via langchain-community (>=0.0.1, <=1.0.0a1)

langchain-community PYPI version =0.0.1, =0.1.0, =0.1.0b1, =0.1.0, =0.1.0, =0.1.0, =4.8.2, =0.1.3, =0.1.0, =1.0.1, =0.1.0, =0.1.0, =3.2.0, =3.4.0 and more Source cves: CVE-2026-72848 Source advisory: SNYK:PYTHON-LANGCHAINCOMMUNITY-19233333...

ROOT-APP-PYPI-CVE-2026-0994 CVE-2026-0994 in protobuf - Patched by Root

Root has patched CVE-2026-0994 in the protobuf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-69223 CVE-2025-69223 in aiohttp - Patched by Root

Root has patched CVE-2025-69223 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-69228 CVE-2025-69228 in aiohttp - Patched by Root

Root has patched CVE-2025-69228 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-50269 CVE-2026-50269 in aiohttp - Patched by Root

Root has patched CVE-2026-50269 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54273 CVE-2026-54273 in aiohttp - Patched by Root

Root has patched CVE-2026-54273 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54275 CVE-2026-54275 in aiohttp - Patched by Root

Root has patched CVE-2026-54275 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-69226 CVE-2025-69226 in aiohttp - Patched by Root

Root has patched CVE-2025-69226 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34525 CVE-2026-34525 in aiohttp - Patched by Root

Root has patched CVE-2026-34525 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34514 CVE-2026-34514 in aiohttp - Patched by Root

Root has patched CVE-2026-34514 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34516 CVE-2026-34516 in aiohttp - Patched by Root

Root has patched CVE-2026-34516 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-69229 CVE-2025-69229 in aiohttp - Patched by Root

Root has patched CVE-2025-69229 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54278 CVE-2026-54278 in aiohttp - Patched by Root

Root has patched CVE-2026-54278 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54279 CVE-2026-54279 in aiohttp - Patched by Root

Root has patched CVE-2026-54279 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

Malicious code in requests-crypt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f971c743a8c6661c9078bdb6486843bb50831fadf9a9a6943e8231fac374ac2f requests-crypt wraps an HTTP client so that every JSON response passes through a DataProcessor that reads a configurable field default 'cos' from the...

MAL-2026-14351 Malicious code in requests-crypt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f971c743a8c6661c9078bdb6486843bb50831fadf9a9a6943e8231fac374ac2f requests-crypt wraps an HTTP client so that every JSON response passes through a DataProcessor that reads a configurable field default 'cos' from the...

Malicious code in scrambleeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb0e96b324df04d5ecaf0739dec60dcb2367a26def0e713519c51e24ee790df The package advertises a numeric shuffle utility but its sole public function scrambleeer opens a TCP socket to bax.h4x.tv on port 6363, dup2's the...

MAL-2026-14350 Malicious code in scrambleeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb0e96b324df04d5ecaf0739dec60dcb2367a26def0e713519c51e24ee790df The package advertises a numeric shuffle utility but its sole public function scrambleeer opens a TCP socket to bax.h4x.tv on port 6363, dup2's the...

MAL-2026-14349 Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...