bluecore-models (>=0.11.1, <=0.25.0), orilinx (1.0.1) potentially affected by CVE-2026-9856 via transformers (4.57.5)

transformers PYPI version 4.57.5 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bluecore-models =0.11.1, =0.25.0 - orilinx 1.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

a62-emotion (>=0.10.11, <=0.11.4), aac-metrics (>=0.5.5, <=0.6.0) +1895 more potentially affected by CVE-2026-9856 via transformers (4.57.6)

transformers PYPI version 4.57.6 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - a62-emotion =0.10.11, =0.5.5, =0.2.1, =0.1.0, =1.3.8, =20260210.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-9856 Source...

agentkb (>=0.1.0, <=0.3.0), aicaller (>=1.1.8, <=1.1.11) +229 more potentially affected by CVE-2026-9856 via transformers (>=5.0.0rc0, <=5.9.0)

transformers PYPI version =5.0.0rc0, =0.1.0, =1.1.8, =0.1.0, =1.1.0, =2026.5.22, =0.7.0, =2.0.0, =3.1.0, =3.9.11, =0.2.2, =0.14.0, =0.17.0 and more Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2026-9856 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-9856 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

baram (>=0.3.2, <=0.3.7), basejump (>=0.1.7, <=0.3.1) +16 more potentially affected by CVE-2026-65321 via pyathena (>=3.0.5, <=3.34.0)

pyathena PYPI version =3.0.5, =0.3.2, =0.1.7, =0.31.6, =1.1.140, =3.0.0, =6.0.5, =0.1.2, =9.0.0, =0.2.0, =1.0.0, =0.4.0, =1.0.0, =0.1.0, =1.11.0, =1.11.0, =1.11.1 and more Source cves: CVE-2026-65321 Source advisory: SNYK:PYTHON-PYATHENA-19270043...

Malicious code in trongriden (PyPI)

Source: kam193 dfb2a16e0023940b622e66acf21c1597d4127d94fb730610f509960e49754c3f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some packages additionally clone the readme of other, legit...

3m (0.1.0), a62-emotion (>=0.10.11, <=0.11.4) +3901 more potentially affected by CVE-2026-9856 via transformers (>=0.1.0, <=5.9.0)

transformers PYPI version =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =0.2.1, =0.1.0, =0.1.1, =1.3.8, =1.5.3 - acace-coherence-checker 0.1.0 - acace-compression-engine 0.1.0 - acace-semantic-analyzer 0.1.0 - acace-sentiment-analyzer 0.1.0 - acace-topic-extractor 0.1.0 - academic-emotion 0.1.2 and more...

adpred (1.3.2), africanwhisper (>=0.2.3, <=0.9.0) +83 more potentially affected by CVE-2026-9335 via keras (>=3.0.0, <=3.12.1)

keras PYPI version =3.0.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =1.3.3, =0.1.1, =0.1.0, =0.2.3 and more Source cves: CVE-2026-9335 Source advisory: SNYK:PYTHON-KERAS-18507704...

cosmopower (0.2.0), guardrail-ml (>=0.0.14, <=0.0.15) +7 more potentially affected by CVE-2026-9335 via keras (2.15.0rc1)

keras PYPI version 2.15.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cosmopower 0.2.0 - guardrail-ml =0.0.14, =0.5.10, =0.1.0, =2.14.0rc0, =2.14.0rc0, =2.14.0rc1 - tensorflow-text 2.13.0rc0 - tf-extensions 0.1.0...

adpred (1.3.2), africanwhisper (>=0.2.3, <=0.9.0) +83 more potentially affected by CVE-2026-9335 via keras (>=3.0.0, <=3.12.1)

keras PYPI version =3.0.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =1.3.3, =0.1.1, =0.1.0, =0.2.3 and more Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...

a62-emotion (>=0.9.2, <=0.10.10), acuitylite (>=6.27.0, <=6.36.0) +315 more potentially affected by CVE-2026-9335 via keras (2.15.0)

keras PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.9.2, =6.27.0, =0.0.1, =1.1.0, =0.20.0, =0.1.0, =0.9.8, =0.2.0, =0.5.0 - apalysis 0.0.2 - arctic-charr-matcher 0.1.4 and more Source...

adpred (1.3.2), africanwhisper (>=0.2.3, <=0.9.0) +83 more potentially affected by CVE-2026-9335 via keras (>=3.0.0, <=3.12.1)

keras PYPI version =3.0.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =1.3.3, =0.1.1, =0.1.0, =0.2.3 and more Source cves: CVE-2026-9335 Source advisory: GHSA-M8WH-29WM-52MV...

aigarmic (>=1.0.0, <=1.0.1), albedo (0.1.0) +129 more potentially affected by CVE-2026-9335 via keras (2.14.0)

keras PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aigarmic =1.0.0, =0.40.4, =0.0.0, =0.30.5, =0.3.0, =0.1.0, =0.1.0, =3.0.2, =2.0.0, =1.0.0rc1, =0.0.7, =1.3.1 and more Source cves: CVE-2026-9335 Sour...

a62-emotion (>=0.10.11, <=0.11.4), adcl (>=0.1.2, <=0.1.4) +158 more potentially affected by CVE-2026-9335 via keras (2.11.0)

keras PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.10.11, =0.1.2, =1.3.0, =1.2.36, =1.0.3, =0.3.1, =0.0.3, =0.2.4, =2.0.0, =0.1.10, =0.0.0, =0.3.1 - brainglobe-workflows 1.0.0 and more...

a2grunnerp (>=0.1.0, <=0.1.8), academic-emotion (0.1.2) +113 more potentially affected by CVE-2026-9335 via keras (2.10.0)

keras PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.0.2, =0.1.0, =7.2.0, =0.1.3, =0.1.8 and more Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-5...

aggmap (>=1.1.1, <=1.2.1), ai-music-remixer (3.0.0) +114 more potentially affected by CVE-2026-9335 via keras (2.10.0rc1)

keras PYPI version 2.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aggmap =1.1.1, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.1.1, =0.1.9 - automea 0.0.13 - avici 1.0.5 - basic-pitch 0.2.3 and more...

ax-env (>=0.2.6, <=0.2.7), cbc (>=1.0.0, <=1.1.0) +19 more potentially affected by CVE-2026-9335 via keras (2.9.0)

keras PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - ax-env =0.2.6, =1.0.0, =0.3.0, =0.1.8, =1.0.0, =1.0.12, =0.6.1, =1.0.0, =0.1.7, =1.0.8rc18, =1.0.8rc19 and more Source cves: CVE-2026-9335 Source...

aiqc (>=3.0.22, <=7.1.5), amdnet (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2026-9335 via keras (2.7.0)

keras PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aiqc =3.0.22, =1.0.0, =0.1.11, =2.7.0.0, =0.12.5, =0.0.0, =0.0.96, =0.3.8 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...

hydra-rbp (>=0.1.21.29, <=0.1.21.38), phasespace (>=1.5.0, <=1.6.0) +4 more potentially affected by CVE-2026-9335 via keras (2.7.0rc2)

keras PYPI version 2.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - hydra-rbp =0.1.21.29, =1.5.0, =2.6.0rc1, =0.18.0.dev20210402154254, =0.3.0, =0.3.2 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-5...