MAL-2025-192948 Malicious code in extrazip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

EUVD-2025-205471

Malicious code in extrazip PyPI...

Malicious code in crypo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3a0850548e71807fb514fcd1943f55f7c3bd6408086ff7a495d7df628a083db9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

EUVD-2025-205472

Malicious code in crypo PyPI...

EUVD-2025-205473

Malicious code in crpto PyPI...

MAL-2025-192946 Malicious code in crpto (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8d63e95f77927edecca2696ce60ea5c069170b051adc651f425a42b2f27f384c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

EUVD-2025-205470

Malicious code in flaask PyPI...

EUVD-2025-205457

Malicious code in telebot-bot PyPI...

EUVD-2025-205458

Malicious code in telegrem PyPI...

Malicious code in telegrem (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f2186dc29d07dc851d756bae0b5d080ebe5923efe6654fdb4aa9ec55bbba9b6a The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

EUVD-2025-205426

Malicious code in aiogram-3 PyPI...

EUVD-2025-205375

Malicious code in pxdbench PyPI...

EUVD-2025-205360

Malicious code in envtoolsx PyPI...

MAL-2025-192929 Malicious code in envtoolsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8718f9207ffeca355720b0d4a59cc778fabe7879fc354837d655affac6a82321 Importing the module, downloads and starts a malicious executable identified as infostealer. Based on Telegram links, this is related to the 2025-12-synium...

MAL-2025-192928 Malicious code in livekit-agents-hedra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8391aaa11b2ae78ceba6cf6eea7b0671d2d21b32d838b94f4504afa13ea832ce Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

EUVD-2025-205356

Malicious code in livekit-agents-hedra PyPI...

ads-and (0.1.3), ads-bib (>=0.1.0, <=0.3.3) +39 more potentially affected by CVE-2025-14929 via transformers (4.56.2)

transformers PYPI version 4.56.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ads-and 0.1.3 - ads-bib =0.1.0, =0.8.0, =0.1.0, =2.0.0rc2, =0.1.0, =0.15.5, =0.1.1, =0.13.2, =1.0.3.post1.dev0, =1.0.0, =1.0.5 and more...

EUVD-2025-204780

Malicious code in lanchain-openai PyPI...

Malicious code in lanchain-openai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4c312361541ed240dabd6df1f9cb9ed856a718dc8c8881f43bbacb429807e303 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-192699 Malicious code in lanchain-openai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4c312361541ed240dabd6df1f9cb9ed856a718dc8c8881f43bbacb429807e303 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...