homeassistant-stubs (2022.6.0b2), pytest-homeassistant-custom-component (0.9.6) potentially affected by CVE-2026-64825 via homeassistant (2022.6.0b2)

homeassistant PYPI version 2022.6.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.0b2 - pytest-homeassistant-custom-component 0.9.6 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.5.2), pytest-homeassistant-custom-component (0.9.0) potentially affected by CVE-2026-64825 via homeassistant (2022.5.2)

homeassistant PYPI version 2022.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.5.2 - pytest-homeassistant-custom-component 0.9.0 Source cves: CVE-2026-64825 Source advisory:...

pytest-homeassistant-custom-component (0.5.7) potentially affected by CVE-2026-64825 via homeassistant (2021.12.3)

homeassistant PYPI version 2021.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - pytest-homeassistant-custom-component 0.5.7 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (2023.3.0b2) potentially affected by CVE-2026-64825 via homeassistant (2023.3.0b2)

homeassistant PYPI version 2023.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.3.0b2 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (2023.10.2), pytest-homeassistant-custom-component (0.13.65) potentially affected by CVE-2026-64825 via homeassistant (2023.10.2)

homeassistant PYPI version 2023.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.10.2 - pytest-homeassistant-custom-component 0.13.65 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.2.7), pytest-homeassistant-custom-component (0.6.13) potentially affected by CVE-2026-64825 via homeassistant (2022.2.7)

homeassistant PYPI version 2022.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.7 - pytest-homeassistant-custom-component 0.6.13 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2022.3.0b2), pytest-homeassistant-custom-component (0.6.17) potentially affected by CVE-2026-64825 via homeassistant (2022.3.0b2)

homeassistant PYPI version 2022.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b2 - pytest-homeassistant-custom-component 0.6.17 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2023.12.4) potentially affected by CVE-2026-64825 via homeassistant (2023.12.4)

homeassistant PYPI version 2023.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.12.4 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (2023.11.0b4) potentially affected by CVE-2026-64825 via homeassistant (2023.11.0b4)

homeassistant PYPI version 2023.11.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.11.0b4 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (2021.5.4) potentially affected by CVE-2026-64825 via homeassistant (2021.5.4)

homeassistant PYPI version 2021.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.5.4 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (2021.9.2) potentially affected by CVE-2026-64825 via homeassistant (2021.9.2)

homeassistant PYPI version 2021.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.9.2 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (2021.12.0b7) potentially affected by CVE-2026-64825 via homeassistant (2021.12.0b7)

homeassistant PYPI version 2021.12.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.0b7 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (>=2026.5.0b0, <=2026.6.0b0), pytest-homeassistant-custom-component (>=0.13.326, <=0.13.334) +1 more potentially affected by CVE-2026-64825 via homeassistant (>=2026.5.0b0, <=2026.6.0b0)

homeassistant PYPI version =2026.5.0b0, =2026.5.0b0, =0.13.326, =1.0.15, =1.0.23 Source cves: CVE-2026-64825 Source advisory: SNYK:PYTHON-HOMEASSISTANT-18508062...

Malicious code in ztasimb (PyPI)

--- Credit: OpenSSF source...

Malicious code in zproxy (PyPI)

--- Credit: OpenSSF source...

Malicious code in zlibxjson (PyPI)

Source: kam193 7066166aef73a74278d8bf23450a89f6a42d22c8fac20660bc5275868b92d211 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: zlibxjson-discord-cookies Reasons based on the campaign: - infostealer --- Credit: OpenSSF source...

Malicious code in zyqnuutupjerllnbxaeq (PyPI)

--- Credit: OpenSSF source...

Malicious code in znomig (PyPI)

--- Credit: OpenSSF source...

Malicious code in zenomenallib (PyPI)

Source: kam193 4c6be0b94e3c9643885ae8893cd9523bd5ad735965a16a3df64a347bd38f8016 Package is prepared to exfiltrate sensitive files. Different packages use different places for the malicious code: it runs during importing the module, is placed in a native binary, or in the setup.py script ---...

Malicious code in zzzzthisisitwantsafecheckitzzzz (PyPI)

Source: kam193 fbef17827bf88f06c2278d700e386c98e2f1360fd533ba1415c9060ff56a037f During installation, if run under a specific username, the package downloads and installs two executables identified as backdoors trojans. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...