Malicious code in replacesuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 79d2cd50c9e96394c61f775635d35295977fc8900f2eda9088eff7afc9e1f875 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in pipcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 89248a3e2b0b36793c55ed90ff649b700dae770cea17da3e0f61c8013fc6a49b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in pywurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fec0f9cbb8341fe259d3d83e9da2c88f7635caf2b746b06d31c28c6eb0240667 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in revm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e2335bbec77d75b58effd7e599d6d9e21cf4a6dbe0aedeb01125eb05809fc63d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in httpad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef36c406f0255d732d651818988cda2af3636a5fbf83ccdc02a04fb28ae266e9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in discodr-webhook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ca6122eb288623ada3df062fb6570a2c8dd3516234f4b93e08d9f043575e41dc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sickit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc42e627b9062b3348f41834d79c21ff46756e374c14509eec1b73a8a00dc749 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sciit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 64ce8a9c14387c34b739807badfa8d3e62bb51ec10f7869193e38c32089db405 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websockeets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d3684f6102d0addfd584997b5be2ba86d46d0dcd16759fce4e5c5126d14d282b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

Ubuntu 16.04 ESM : wheel vulnerability (USN-5821-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5821-2 advisory. USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description blo...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : wheel vulnerability (USN-5821-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5821-1 advisory. Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker coul...

CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

DEBIAN-CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

PYSEC-2022-43012

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

UBUNTU-CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

PYSEC-2022-43017

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python Packaging Authority PyPA Wheel version 0.37.1 and earlier. An attacker c...