Malicious code in ailaunchkit (PyPI)

Source: kam193 a11e86f01cbd23fcc0453904b7991ddaaf87582fde3bcc3b48686a28213c46d9 In this campaign, some packages e.g. cognikit, aiassistcore are pulled as dependencies and contain the C2 configuration and the malicious functionality, while others like aichannel provide fake functionality and...

Malicious code in aiassistcore (PyPI)

Source: kam193 f2900cfaae06740bbefca375a4d23cb6c3dd67726ace0f9cffda92c04f1c4333 In this campaign, some packages e.g. cognikit, aiassistcore are pulled as dependencies and contain the C2 configuration and the malicious functionality, while others like aichannel provide fake functionality and...

Malicious code in reguestsc (PyPI)

Source: kam193 20e4ae2ce79408a65e9b4bb348c2d69e20eb6072e3641531e2ec5773f1bbddd6 Clones of a legitimate library with injected code downloading and executing a malicious executable on import. Dynamic analysis identified it as salatstealer. --- Category: MALICIOUS - The campaign has clearly maliciou...

hate_crack v2.19.0

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

Malicious code in ml-fdbk-shared (PyPI)

Source: kam193 2f2313f59d10884a764cb2e2dbfe3aa8ae97545c995785f65ca1e856b4a29b8c During installation, package exfiltrates basic info and all environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-ml-shared Reasons based on...

Malicious code in ml-nps-shared (PyPI)

Source: kam193 fed6e01148ede73fae9d01667807eb310434a9c801b9eb60f08141e34921fc85 During installation, package exfiltrates basic info and all environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-ml-shared Reasons based on...

Malicious code in ml-shared (PyPI)

Source: kam193 4f4ae8fee891c54953efa7c796a605e700fc827131feff0243f0b3bc8bd6a260 During installation, package exfiltrates basic info and all environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-ml-shared Reasons based on...

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-62663 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-62663 Source advisory: SNYK:PYTHON-BANKS-18507725...

Malicious code in ai-perf-toolkit (PyPI)

Source: kam193 41d25387636c9b0b89a404304d079c30ad28bda33bb551e551cb9e15a75c00ba During import, the package starts cryptomining for a hardcoded wallet. The mining software has to already be installed. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in mcp-search-server (PyPI)

Source: kam193 668e6c74d0665065f6c75fb03d82071cda10cea3ad8f1cd20068cbe2c702d728 Versions published since 2026-07 contain a stub 'share compute swarm' functionality for 'faster results'. The functionality was not fully implemented - the package only reports home on every run - but the other packag...

voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-62663 via banks (2.2.0)

banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-62663 Source advisory: MEND:CVE-2026-62663...

quantguard (>=0.1.37, <=0.1.38), superset-sqlalchemy-gizmosql-adbc-dialect (>=0.0.3, <=0.0.9) potentially affected by CVE-2026-23981 via apache-superset (>=4.1.4, <=5.0.0)

apache-superset PYPI version =4.1.4, =0.1.37, =0.0.3, =0.0.9 Source cves: CVE-2026-23981 Source advisory: MEND:CVE-2026-23981...

Malicious code in phabricator-client (PyPI)

Source: kam193 1e92e5b2c5182be4ddf6a9acced6db4e6bb3c7413970c931b4abd47910b1bb26 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

safe-chain v1.5.14

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

bravoserver (3.1.1), c2cciutils (>=1.1.0.dev20260322010408, <=1.1.74) +24 more potentially affected by CVE-2026-13346 via pip (>=26.0.0, <=26.1.2)

pip PYPI version =26.0.0, =1.1.0.dev20260322010408, =26.6.0, =2.38.0, =0.1.1, =0.9.478, =2602.1.0, =0.1.0, =0.1.0, =0.1.0, =1.6.1 and more Source cves: CVE-2026-13346 Source advisory: SNYK:PYTHON-PIP-18426311...

clai (>=2.0.0b1, <=2.4.0), email-to-calendar (>=1.0.67, <=20260703001012.0.0.dev0) +8 more potentially affected by CVE-2026-65975 via pydantic-ai-slim (>=2.0.0b1, <=2.4.0)

pydantic-ai-slim PYPI version =2.0.0b1, =2.0.0b1, =1.0.67, =1.0.0, =2.0.0b1, =2.0.0b1, =2.0.0b1, =1.0.1, =0.0.3a20, =2.48.1, =2.50.0 Source cves: CVE-2026-65975 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20877472...

c2cciutils (1.1.32), lenstozotero (>=0.1.2, <=0.1.4) +15 more potentially affected by CVE-2026-13346 via pip (23.3.1)

pip PYPI version 23.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - c2cciutils 1.1.32 - lenstozotero =0.1.2, =0.0.15, =0.0.1, =1.1.1, =0.0.1, =0.4.7, =0.0.6, =0.0.3, =0.0.1, =1.0.1, =0.1.0, =0.6.2, =0.12.3 - vg-management...

aadetools (>=0.0.3, <=0.0.5), autocut3d (0.1.0) +14 more potentially affected by CVE-2026-13346 via pip (19.2.3)

pip PYPI version 19.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aadetools =0.0.3, =1.10.0, =0.1.4, =0.4.2, =2.0.0, =0.0.4, =0.2.4, =2019.9.2, =2019.10.22 - rtopy 0.1.0 - student-mixture 0.1.10 and more Source cves:...

codecraft-chat (>=0.82.4.dev64, <=0.82.4.dev69), cryptobot-python (0.1.9) +2 more potentially affected by CVE-2026-13346 via pip (25.1.0)

pip PYPI version 25.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - codecraft-chat =0.82.4.dev64, =0.0.21, =0.2.8 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

aaanalysis (>=0.1.2, <=1.0.0), abilian-devtools (>=0.5.14, <=0.5.17) +52 more potentially affected by CVE-2026-13346 via pip (23.3.2)

pip PYPI version 23.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aaanalysis =0.1.2, =0.5.14, =0.1.0, =1.0.0, =0.0.7, =1.0.2, =1.2.1.dev0, =2.4.0, =1.1.33, =1.30.0, =0.1.1, =0.1.5, =0.2.2 - cocodrilo 0.1.0 and more Sour...