aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +137 more potentially affected by CVE-2026-54691 via datamodel-code-generator (>=0.10.3, <=0.59.1)

datamodel-code-generator PYPI version =0.10.3, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-54691 Source advisory: OSV:GHSA-RFR2-MQ9M-X2QX...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +137 more potentially affected by CVE-2026-54691 via datamodel-code-generator (>=0.10.3, <=0.59.1)

datamodel-code-generator PYPI version =0.10.3, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-54691 Source advisory: MEND:CVE-2026-54691...

agency-swarm (>=1.10.0, <=1.10.1), fastapi-code-generator (0.7.0) potentially affected by CVE-2026-55390 via datamodel-code-generator (>=0.59.1, <=0.61.0)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =1.10.1 - fastapi-code-generator 0.7.0 Source cves: CVE-2026-55390 Source advisory: GHSA-442Q-2J6P-642G...

aas-middleware (>=0.1.0, <=0.2.6), acex-client (>=0.0.6, <=4.6.0) +139 more potentially affected by CVE-2026-55390 via datamodel-code-generator (>=0.5.10, <=0.61.0)

datamodel-code-generator PYPI version =0.5.10, =0.1.0, =0.0.6, =0.0.1, =0.2.5, =0.1.0a0.dev0, =0.0.2, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.0, =0.1.0 and more Source cves: CVE-2026-55390 Source advisory: SNYK:PYTHON-DATAMODELCODEGENERATOR-18388115...

3lc (>=2.19.0, <=2.22.0), 3lc-ultralytics (>=0.1.7, <=0.2.1) +5 more potentially affected by CVE-2026-48060 via litestar (>=2.0.0b2, <=2.15.2)

litestar PYPI version =2.0.0b2, =2.19.0, =0.1.7, =0.1.0, =0.2.0, =0.3.14, =0.3.35 Source cves: CVE-2026-48060 Source advisory: MEND:CVE-2026-48060...

Malicious code in dev-helper-bg (PyPI)

Source: amazon-inspector ce930400319131adb4adf9f442340165a52a3ebd8320c497d1de05a3f896cac3 On import devhelper, devhelper/init.py calls startdecryptor at module top level, which spawns a daemon thread running decryptandrun. That function fetches an AES-GCM key from the hardcoded endpoint...

Malicious code in mrmustard (PyPI)

Source: amazon-inspector 535679eb30bfd0600dc07e44d2e649c88ecb6274364e2ba0b1ef2ccc05976727 On plain import mrmustard, the top-level init.py spawns a background thread that reads /.ssh/ private keys, /.aws/credentials, /.aws/config, /.kube/config, environment variables, pip freeze output, and...

Malicious code in karpatkey (PyPI)

Source: amazon-inspector b434ae7cf6afb9ce18a54757c03069983e404db695d959bd29aa628864b8349c On import karpatkey, the top-level karpatkey/init.py spawns a daemon background thread that walks the installer's home directory and collects SSH private keys /.ssh/id, AWS credentials /.aws/credentials, GCP...

Malicious code in karpatkit (PyPI)

Source: amazon-inspector df2d9d6dd18d56c6ef8303bc90a0254383b3a7b0f202f5e50b7a1c6ceafd77f7 On import karpatkit, the top-level init.py invokes compat.check which spawns a daemon thread that collects os.environ, the Kubernetes service-account token, /.ssh/id, /.aws/credentials, /.config/gcloud/.json...

Malicious code in vtranalytic (PyPI)

Source: amazon-inspector ebce016051a9e9cb604067185042ce49c7426aa1ac01aa606e430c4d1120eec7 Package implements a Telegram-bot-driven remote administration tool that gives whoever holds the configured bot token full control of the installer's host. A polling loop calls the Telegram getUpdates API an...

Malicious code in govapkg (PyPI)

Source: amazon-inspector 6960d465fbaca432a24450044c48aaaeb6f4c687171c4c0c4305005cccceffaf govapkg presents itself as a client for pkg.go.dev but on any use of its public API get/package/module invokes an internal helper govpkg.internal.normalizeHelper that base64-decodes a hidden URL to...

PyPI Server Detect

Detects PyPI Server Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PyPI Server Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PyPI Server Detect', 'description': 'Detects PyPI Server Detect.',...

safe-chain v1.5.13

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

Malicious code in cfgzen (PyPI)

Source: kam193 588fed6ec45af5cfb8925b1f7d93b07b73d47b919a50305438153dfbb7f953e1 The malicious code sits in a native module, which is called in a few places, including the code run via PTH embedded since version 1.0.6. The native module downloads an encrypted blob and decrypt it to an executable...

Malicious Package

Overview chroma-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ollamaa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview openaii is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview pymem-win is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview lucy-python-script-2030 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview platform-telemetry-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...