EUVD-2022-0034

Malicious code in bioql PyPI...

EUVD-2022-0374

Malicious code in bioql PyPI...

EUVD-2022-0377

Malicious code in bioql PyPI...

EUVD-2022-0376

Malicious code in bioql PyPI...

EUVD-2022-0062

Malicious code in bioql PyPI...

EUVD-2022-36062

Malicious code in bioql PyPI...

EUVD-2022-0415

Malicious code in bioql PyPI...

EUVD-2022-0372

Malicious code in bioql PyPI...

EUVD-2022-0384

Malicious code in bioql PyPI...

EUVD-2022-0388

Malicious code in bioql PyPI...

EUVD-2022-0391

Malicious code in bioql PyPI...

EUVD-2022-0392

Malicious code in bioql PyPI...

EUVD-2022-0394

Malicious code in bioql PyPI...

EUVD-2022-0033

Malicious code in bioql PyPI...

EUVD-2022-0117

Malicious code in bioql PyPI...

gobby (>=0.2.5, <=0.2.13), memu-py (>=1.3.0, <=1.5.1) potentially affected by CVE-2025-10965 via lazyllm (1.3.0)

lazyllm PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on lazyllm and may be impacted: - gobby =0.2.5, =1.3.0, =1.5.1 Source cves: CVE-2025-10965 Source advisory: SNYK:PYTHON-LAZYLLM-13110091...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-55554 via torch (>=1.0.0, <=2.14.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-55554 Source advisory: SNYK:PYTHON-TORCH-13052969...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10951 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10951 Source advisory: SNYK:PYTHON-MLLOGGER-13110027...

MAL-2025-191892 Malicious code in terminalcolornew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a555882888b9895fbe7575cc6121cad44600e17fb64d7551cacc33b29f2ae9f If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

Malicious code in onnxruntime-winml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5566aa4ecc644b36e90902092563c05e1852d751381539398f2307ae1fbefae6 Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...