MAL-2025-6594 Malicious code in spokeo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 77e85dedb987a603a027306a57e7b988de52be0c9f12fc2a04dfacf5e3adcd19 Installing source package or importing the module starts downloading and running an external executable, which is widely recognized as malware --- Category:...

Malicious code in pythondm32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2350dbde660e08d6f97a447886432a41c60802af7e1396dabff53af3ec9091f6 The embedded dm3.1233.dll has a very high recognition as malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-191846 Malicious code in pythondm32 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2350dbde660e08d6f97a447886432a41c60802af7e1396dabff53af3ec9091f6 The embedded dm3.1233.dll has a very high recognition as malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-data (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-chart (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-charts (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in requestsdev (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5129 Malicious code in requestsdev (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in requestpacket (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5109 Malicious code in dbgpkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dbgpkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in colorizator (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aliyun-ai-labs-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Fusion and IBM Fusion HCI are vulnerable to request smuggling due to python package h11 (CVE-2025-43859)

Summary The python package h11 is used by IBM Fusion and IBM Fusion HCI as part of the Content Aware Storage service and the Backup and Restore service agent and is vulnerable to request smuggling under certain conditions due to CVE-2025-43859 in h11. Vulnerability Details CVEID:CVE-2025-43859...

Malicious code in csvvv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e157e7947b2537be3a2e7840eee2fc4fad72a65954af858d89095d73f1755c03 Importing downloads and starts a remote script. At the analysis time, the script did not contain malicious code. Package description states it's a security...

MAL-2025-6490 Malicious code in csvvv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e157e7947b2537be3a2e7840eee2fc4fad72a65954af858d89095d73f1755c03 Importing downloads and starts a remote script. At the analysis time, the script did not contain malicious code. Package description states it's a security...

Malicious code in syscachelib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c8aa87f03342830d082dcfd87dfce0528b19781902f9c9e56a7379046d8a1572 Importing the module starts a UAC bypass through fodhelper to run a privileged shell, and download and execute a remote file. --- Category: MALICIOUS - The...

Fedora: Security Advisory (FEDORA-2025-41dc96c19a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-191695 Malicious code in browser-history-analytics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e1ac674eaa856956dea531487502bd21a51f5324bdfcaf788645bbbb41eb27f5 When starting the server with expected functionality with potentially sensitive content, the package silently sends the location external IP to a remote...

MAL-2025-191942 Malicious code in zamino (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c9ada91851d5e9411f5c74d5ea595be092fc2e4d2e8f7f7c995b6fbb6bd90d00 Clones of libraries to access Aminoapps e.g. legitimate package amino.fix with added exfiltration of the given credentials --- Category: MALICIOUS - The campai...