AZL-72739 CVE-2025-68146 affecting package python-filelock for versions less than 3.20.1-1

filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation...

EUVD-2025-203387

Malicious code in smtblib PyPI...

openSUSE Security Advisory (SUSE-SU-2025:4389-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2025-202700

Malicious code in yzip PyPI...

Malicious code in yzip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 81477965a8a70d1ffef0d388478d3e05ef2eea54ade0a9c00ef923deb41b00cf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

MAL-2025-192468 Malicious code in yzip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 81477965a8a70d1ffef0d388478d3e05ef2eea54ade0a9c00ef923deb41b00cf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

Malicious code in netbenchkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa328b263fd5f17449e326d05af9a5849a25d6c028d092e586097e95c4e1db59 Package imports and executes malicious synium package --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

EUVD-2025-202602

Malicious code in netbenchkit PyPI...

MAL-2025-192437 Malicious code in netbenchkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa328b263fd5f17449e326d05af9a5849a25d6c028d092e586097e95c4e1db59 Package imports and executes malicious synium package --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

EUVD-2025-202603

Malicious code in synium PyPI...

EUVD-2025-202588

Malicious code in jsonschema-utf8 PyPI...

EUVD-2025-202464

Malicious code in loguru-utf8 PyPI...

EUVD-2025-202409

Malicious code in ctosec-appsec-wb-xray-adapters PyPI...

MAL-2025-192432 Malicious code in kzip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a81e0fa699edbad810083efb9de4e22f5088c31c22fdf71f7e519269dc5ad01 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

EUVD-2025-202410

Malicious code in kzip PyPI...

Malicious code in kzip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a81e0fa699edbad810083efb9de4e22f5088c31c22fdf71f7e519269dc5ad01 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

EUVD-2025-202411

Malicious code in bigpyx PyPI...

Malicious code in bigpyx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a1bcd636394f1505534cf691576b00e8686aa14474e8a209c94f8213310b128 Continuation of the campaign with a slight different obfuscation of the malicious code, but there seems to be no difference in the behavior. The malicious code...

MAL-2025-192430 Malicious code in bigpyx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a1bcd636394f1505534cf691576b00e8686aa14474e8a209c94f8213310b128 Continuation of the campaign with a slight different obfuscation of the malicious code, but there seems to be no difference in the behavior. The malicious code...

Malicious code in helloharry123c (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d96199434e00bd319016041b6a9d896c57ad5bc13773a87ef01d2096d0d9e36 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...