PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

The maintainers of Python Package Index PyPI, the official third-party software repository for the Python programming language, have temporarily disabled the ability for users to sign up and upload new packages until further notice. "The volume of malicious users and malicious projects being...

MAL-2023-1383 Malicious code in opencv-keras (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f3dbc8704eb128ec656854e38ccd3c45d1232978eed378bb7711837dddd09bf The OpenSSF Package Analysis project identified 'opencv-keras' @ 17.10.13 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1414 Malicious code in sqlalchemy-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e9079084215abb63a9468cc5ba89b5275afec40b081f77e9518498eb56a0c30 The OpenSSF Package Analysis project identified 'sqlalchemy-os' @ 14.0.10 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1399 Malicious code in req-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1a249da7f5d65ac080890111e76921348e8eadbfca48a449be1319f9c65982c The OpenSSF Package Analysis project identified 'req-flask' @ 2.9.4 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1384 Malicious code in os-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1394 Malicious code in pylint-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3445cee4e2fd4e4e0170f04b51b2a3409af7c1b2478609a38bcc46d5094e134d The OpenSSF Package Analysis project identified 'pylint-py' @ 15.0.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1393 Malicious code in pylint-beautifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3646b7e949a863983491259c105cde8b1ff0229781276a5ea22360c75440c5e The OpenSSF Package Analysis project identified 'pylint-beautifulsoup' @ 3.12.3 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1415 Malicious code in sqlalchemy-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be7d898e9281f3e8f393a19f3b1e4eece53fe128076fb65cc38c73116fc8de64 The OpenSSF Package Analysis project identified 'sqlalchemy-requests' @ 7.1.1 pypi as malicious. It is considered malicious because: - The packa...

Malicious code in matplotlib-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd93a03dd511f9d7c410511963475b420e4509248f52573f9dbcb75147a43d8a The OpenSSF Package Analysis project identified 'matplotlib-req' @ 17.6.16 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1389 Malicious code in pygame-install (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93390eea0977ef15ff0c7413e64df5bd99497ea76e9238097ee0b6f4b9862fdd The OpenSSF Package Analysis project identified 'pygame-install' @ 17.14.20 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1406 Malicious code in selenium-matplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c33741bca6736c936d2c0540044a5d38caf6a18b6981e6268da4295f64985a68 The OpenSSF Package Analysis project identified 'selenium-matplotlib' @ 17.9.4 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1382 Malicious code in numpy-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc92a371c845859241fd20b897b00c4b6c39fcc8ec83dfe9fbb0146c36d267c5 The OpenSSF Package Analysis project identified 'numpy-selenium' @ 5.20.19 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1391 Malicious code in pygame-pytorch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c104a6d866e764da7907147cd7def349f360987498156433ef1e11bf4ac2263c The OpenSSF Package Analysis project identified 'pygame-pytorch' @ 3.4.19 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1385 Malicious code in pandas-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad64cd7fe8db5e273a5e994ca67fcc44546298765caf11ec2edcd0d587481434 The OpenSSF Package Analysis project identified 'pandas-numpy' @ 8.19.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1360 Malicious code in crypto-pygame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12204aa041b42e90b2749e8026e866fbe3d5ff07e79899073fbc585b9950b727 The OpenSSF Package Analysis project identified 'crypto-pygame' @ 10.14.7 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1372 Malicious code in install-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b196a3a87537db3bd5691899d5c2481f27bcee88d6cf9e8576578929b376086 The OpenSSF Package Analysis project identified 'install-pyyaml' @ 1.19.12 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1388 Malicious code in print-pip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b212a33e119ddadecf30da008a6e74a0b1c954521ae1a596e715f201c0abf281 The OpenSSF Package Analysis project identified 'print-pip' @ 13.9.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1403 Malicious code in requests-pandas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 466aafb46bc841bddc0afbb05274ddf5c303d04e389298842ce36325e6809744 The OpenSSF Package Analysis project identified 'requests-pandas' @ 3.10.17 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1405 Malicious code in scikit-learn-matplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d5e86444b47f8ee729dcf7930f4ba68d938ea99b786e110e5d7bd53f081fa9 The OpenSSF Package Analysis project identified 'scikit-learn-matplotlib' @ 6.12.17 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1387 Malicious code in print-django (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 078a5d3998b66f598078a8a6af58420b3dc0685a8c48e4e4b4fb7856496c5a24 The OpenSSF Package Analysis project identified 'print-django' @ 3.9.10 pypi as malicious. It is considered malicious because: - The package...