openSUSE Security Advisory (SUSE-SU-2025:0310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14718-1 python311-ipython-8.31.0-1.1 on GA media

These are all security issues fixed in the python311-ipython-8.31.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14702-1 python311-sentry-sdk-2.20.0-1.1 on GA media

These are all security issues fixed in the python311-sentry-sdk-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in markitanalysis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0181af7442259bbe6dfbeec39c99bc62b711e38ec00c2ce460dc47162390c591 If installed using source package, the package collects selected environment variables, including GITHUBTOKEN if set, and sends to an external service. The...

MAL-2025-191738 Malicious code in getpublicip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 041ba7130d1460fe6480d062c61c78db3b88cc5c6d060913d0501fdbdc7c35b0 If installed using source package, the package collects selected environment variables, including GITHUBTOKEN if set, and sends to an external service. The...

MAL-2025-2974 Malicious code in markitanalysis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0181af7442259bbe6dfbeec39c99bc62b711e38ec00c2ce460dc47162390c591 If installed using source package, the package collects selected environment variables, including GITHUBTOKEN if set, and sends to an external service. The...

Malicious code in reques (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f1c117835fcc30eb4ff0ff5c9426d10011537b644ddea270fcdaba17ed7050e Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1995 Malicious code in rqsts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f9b439bd545383aa5d5b1739d488888d95d4db48c34dc5d8c0339d0e95036af5 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

Malicious code in requestsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0225bc4f200eb1897522fdfd971233a6c0e06527d802f2574ed4c31e618b1966 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

Malicious code in rqsts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f9b439bd545383aa5d5b1739d488888d95d4db48c34dc5d8c0339d0e95036af5 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1991 Malicious code in requesra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42ce5266dc952340618c995bfe692bd0f801b7b3d098188739aa66038074122e Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

Malicious code in requesttss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 12a8bc9313963cfa671547d93bfa32236afe6b7dfeeec048633a547aa05dbc12 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1990 Malicious code in reques (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f1c117835fcc30eb4ff0ff5c9426d10011537b644ddea270fcdaba17ed7050e Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-1993 Malicious code in requestsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0225bc4f200eb1897522fdfd971233a6c0e06527d802f2574ed4c31e618b1966 Clone of the requests package that modified the code to send all get and post requests to a hardcoded URL --- Category: MALICIOUS - The campaign has clearly...

Malicious code in superline (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 59df95892042deb7d9fd8ce71d1890aeafd0cdab2cb8bbc3948504e74ccae39e Importing the package starts an advanced Infostealer, probably Blank Grabber, exfiltrating browser data, wifi passwords, discord and games tokens, crypto walle...

MAL-2025-1996 Malicious code in superline (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 59df95892042deb7d9fd8ce71d1890aeafd0cdab2cb8bbc3948504e74ccae39e Importing the package starts an advanced Infostealer, probably Blank Grabber, exfiltrating browser data, wifi passwords, discord and games tokens, crypto walle...

OPENSUSE-SU-2025:14690-1 python311-azure-storage-blob-12.24.1-1.1 on GA media

These are all security issues fixed in the python311-azure-storage-blob-12.24.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14691-1 python313-3.13.1-1.1 on GA media

These are all security issues fixed in the python313-3.13.1-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in mlc-ai-nightly-cu123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9c2954c829994eac2d7a1843849faec71a96ff47fdd4d6ac9453b654df2aedbf Installing the package exfiltrates information about the host, including environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in mlc-llm-nightly-cu123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 99d49619be0a9e2bcedb22bd4ea489b5cb31a56558e763a78fd09a6f948f2d9e Installing the package exfiltrates information about the host, including environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious...