10734 matches found
Malicious code in euler-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e53c3aac169dec167a2e67afdfaff8f16408781a31dc6516afe115df3ffcc425 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-13730 Malicious code in euler-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e53c3aac169dec167a2e67afdfaff8f16408781a31dc6516afe115df3ffcc425 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-13731 Malicious code in morpho-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 cb58dff63faa08e128ddd0d8d38b82c0711bb60d09d19755a8e8f398fa7d511d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in morpho-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 cb58dff63faa08e128ddd0d8d38b82c0711bb60d09d19755a8e8f398fa7d511d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-13729 Malicious code in dlmm-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e The package's top-level module runs a report routine on import, and setup.py invokes the same import at install time. The routine collects environmen...
Malicious code in dlmm-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e The package's top-level module runs a report routine on import, and setup.py invokes the same import at install time. The routine collects environmen...
Malicious code in dlmm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 044faa804b628c1751f6fa5f66a5f8835ecda1f4d2837ae70411d4630a0607ad Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-13728 Malicious code in dlmm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 044faa804b628c1751f6fa5f66a5f8835ecda1f4d2837ae70411d4630a0607ad Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in bigtime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14cc45326877547d5297956e4c2b5719122bcef140db0d7959e1b4da94e58d7 The package presents itself as a time module wrapper, but its init.py invokes qwe900.init, which performs two exfiltration behaviors on import. First...
MAL-2026-13712 Malicious code in bigtime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14cc45326877547d5297956e4c2b5719122bcef140db0d7959e1b4da94e58d7 The package presents itself as a time module wrapper, but its init.py invokes qwe900.init, which performs two exfiltration behaviors on import. First...
cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +26 more potentially affected by CVE-2026-18947 via feast (>=0.9.3, <=0.66.0)
feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 and more Source cves: CVE-2026-18947 Source advisory: SNYK:PYTHON-FEAST-18612610...
cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +26 more potentially affected by CVE-2026-18948 via feast (>=0.9.3, <=0.66.0)
feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 and more Source cves: CVE-2026-18948 Source advisory: SNYK:PYTHON-FEAST-18612609...
cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +26 more potentially affected by CVE-2026-18941 via feast (>=0.9.3, <=0.66.0)
feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 and more Source cves: CVE-2026-18941 Source advisory: SNYK:PYTHON-FEAST-18612620...
ROOT-APP-PYPI-CVE-2026-47734 CVE-2026-47734 in dulwich - Patched by Root
Root has patched CVE-2026-47734 in the dulwich package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-42563 CVE-2026-42563 in dulwich - Patched by Root
Root has patched CVE-2026-42563 in the dulwich package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-52726 CVE-2026-52726 in dulwich - Patched by Root
Root has patched CVE-2026-52726 in the dulwich package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-42305 CVE-2026-42305 in dulwich - Patched by Root
Root has patched CVE-2026-42305 in the dulwich package for Root:PyPI. Multiple fixed versions available...
MAL-2026-13681 Malicious code in btcflip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4271f738e49ead6113a249ca949232cad9664db210319a097b56385b1942970 The package advertises itself as an HTTP speed-up library, but on import it archives the user's Monero wallet directory C:\Users\Documents\Monero on...
01os (>=0.0.5, <=0.0.13), 3m (>=0.1.0, <=0.1.3) +6934 more potentially affected by CVE-2026-12261 via nltk (>=2.0.4, <=3.10.3)
nltk PYPI version =2.0.4, =0.0.5, =0.1.0, =0.1.0, =0.0.0, =0.10.11, =0.3.7, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.1.dev1, =0.1.0, =1.0.4, =1.1.0 and more Source cves: CVE-2026-12261 Source advisory: SNYK:PYTHON-NLTK-18592338...