[SECURITY] Fedora 41 Update: uv-0.6.14-3.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 40 Update: uv-0.6.14-3.fc40

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

Malicious code in reqinstall (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fabb4dfb4f519f848a714f96e09e2b5fbb289ffdd8cd86fc13c8fbf49b539962 Campaign is split into multiple packages that altogether exfiltrates data from desktop Telegram application. 1. "pyapiepo" is a cover package that provides som...

Malicious code in zscaner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ee09d48ac6f9e7d0460c2a2bc7c9aaae013ce04ac342eb164683b214616e56d1 Campaign is split into multiple packages that altogether exfiltrates data from desktop Telegram application. 1. "pyapiepo" is a cover package that provides som...

MAL-2025-191944 Malicious code in zscaner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ee09d48ac6f9e7d0460c2a2bc7c9aaae013ce04ac342eb164683b214616e56d1 Campaign is split into multiple packages that altogether exfiltrates data from desktop Telegram application. 1. "pyapiepo" is a cover package that provides som...

Malicious code in pyapiepo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 69aee56f4c3bce704bc65574959aee0226417e4d6a6e05e662d6fa235c12815f Campaign is split into multiple packages that altogether exfiltrates data from desktop Telegram application. 1. "pyapiepo" is a cover package that provides som...

[SECURITY] Fedora 42 Update: uv-0.6.14-3.fc42

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

CVE-2025-32434: Deserialization of Untrusted Data

PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution RCE vulnerability exists in PyTorch when loading a model using torch.load with...

CVE-2023-43804 affecting package python3 for versions less than 3.9.19-13

CVE-2023-43804 affecting package python3 for versions less than 3.9.19-13. A patched version of the package is available...

python311-aiohttp-3.11.16-1.1 on GA media (moderate)

python311-aiohttp-3.11.16-1.1 on GA media Announcement ID: openSUSE-SU-2025:14998-1 Rating: moderate Cross-References: CVE-2024-12254 CVSS scores: CVE-2024-12254 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-12254 SUSE : 8.7...

Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

Cybersecurity researchers have disclosed a malicious package uploaded to the Python Package Index PyPI repository that's designed to reroute trading orders placed on the MEXC cryptocurrency exchange to a malicious server and steal tokens. The package, ccxt-mexc-futures, purports to be an extensio...

MAL-2025-3443 Malicious code in colorona (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 27014d3a14c4b1df61609aa62f901b3f8cb01f4898bb729d52d6cd08928555be If the method "SetTerminalColor", imitating colorama package, is called, then the code exfiltrated browser, discord and Minecraft passwords/tokens. --- Categor...

Malicious code in colorona (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 27014d3a14c4b1df61609aa62f901b3f8cb01f4898bb729d52d6cd08928555be If the method "SetTerminalColor", imitating colorama package, is called, then the code exfiltrated browser, discord and Minecraft passwords/tokens. --- Categor...

MAL-2025-3441 Malicious code in colorina (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5280fa2df728b98c1eda6d86d4b0fc233d4bd0d58ac17160427e16f1bb154081 Using the "color" function will exfiltrated data like discord tokens, browser-saved passwords and Minecraft access tokens --- Category: MALICIOUS - The campaig...

Malicious code in colorina (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5280fa2df728b98c1eda6d86d4b0fc233d4bd0d58ac17160427e16f1bb154081 Using the "color" function will exfiltrated data like discord tokens, browser-saved passwords and Minecraft access tokens --- Category: MALICIOUS - The campaig...

Slackware: Security Advisory (SSA:2025-099-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in hyper-request (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6431cc277fd1d8f82ec5160b5943d5ee9ec08ca1a5c5ff9b1b45d67c233b1d2 The only functionality is to exfiltrated Roblox cookies. However, the current version does not contain the webhook url yet see reqhandler.py --- Category:...

MAL-2025-191763 Malicious code in hyper-request (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6431cc277fd1d8f82ec5160b5943d5ee9ec08ca1a5c5ff9b1b45d67c233b1d2 The only functionality is to exfiltrated Roblox cookies. However, the current version does not contain the webhook url yet see reqhandler.py --- Category:...

MAL-2025-191915 Malicious code in ultrafasttelethon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 73a960b0cd2d21f8bde61f22f956a4c2a02ccddd9e1277eef23d3d8e0406cba4 Clone of Telethon package that exfiltrates credentials. See client/telegrambaseclient.py L608-626 exfiltration function and client/auth.py L163 usage. ---...

Malicious code in colorinsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea605189c0cea53175b8c70e9163dcc15333629a93b9ea991d154486c931950c Using the color function triggers attempts to exfiltrate browsers data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...