ThreatDetect

ThreatDetect ThreatDetect is a Streamlit-based insider threat detection prototype that analyzes employee activity data and flags potentially risky behavior. It uses a trained XGBoost classifier together with an Isolation Forest anomaly detector to produce organisation-level risk summaries and...

gvision

GVision is a reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily. https://user-images.githubusercontent.com/37483725/228700363-cc0d8131-4134-4f37-918e-1a342dd22b83.mp4 🤖 About Google...

SIEM Dashboard

🛡️ SIEM Dashboard - Streamlit A real-time, lightweight Security Information and Event Management SIEM dashboard built using Python and Streamlit. It visualizes system usage, monitors client logs, and detects potential USB-based threats and intrusion attempts from logs like auth.log, kernel.log,...

Package-Inferno

PackageInferno Blazingly simple, Docker‑first npm supply‑chain scanner. One compose file runs: Enumerator → builds the queue of packages Fetcher → downloads tarballs and optionally uploads to S3 Analyzer → static analysis + optional YARA Postgres → local DB for findings Streamlit Dashboard →...

network-attack-simulator

Network Attack Simulator A Streamlit-based educational tool for simulating and visualizing common network attacks. Features Simulate various network attacks Port Scan, DoS, Brute Force, Data Exfiltration Interactive dashboard with attack statistics and visualizations Detailed attack logs with...

mini-siem

mini-siem mini-siem is a small intrusion detection tool I bui...

robin

Robin: strumento OSINT per il dark web basato sull'IA Robin è uno strumento basato sull'IA per condurre indagini OSINT sul dark web. Sfrutta gli LLM per perfezionare le query, filtrare i risultati di ricerca dai motori di ricerca del dark web e fornire un riepilogo dell'indagine. Installazione •...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2026-103261 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2026-103262 +1 more via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

Malicious Package

Overview auth-app-streamlit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in auth-app-streamlit (PyPI)

Source: kam193 9662b50ee4db956c8a7ec0bd4e1c9842f709ab2d5d181c325702c727e9e8a199 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

MAL-2026-15577 Malicious code in auth-app-streamlit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9662b50ee4db956c8a7ec0bd4e1c9842f709ab2d5d181c325702c727e9e8a199 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in auth-app-streamlit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9662b50ee4db956c8a7ec0bd4e1c9842f709ab2d5d181c325702c727e9e8a199 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Streamlit - Detect

Streamlit service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Streamlit service was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Streamlit - Detect', 'description': 'Streamlit service was...

Malicious code in mflux-streamlit (PyPI)

Source: amazon-inspector 9924feddaacd4b86934ddc7bdf8ff498921a80b34bf99a9136baa592fcc504b6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193 27ef4c7f33e59dbe037d4b212286dd08cb7b1824c28c0032eb2d91db7a2b0174 Versions 0.0.3, 0.0.4 were...

aquests (>=0.7.16.17, <=0.7.16.18), backend-ai-common (1.3.1) +6 more potentially affected by CVE-2026-0994 via protobuf (3.5.2.post1)

protobuf PYPI version 3.5.2.post1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aquests =0.7.16.17, =1.3.2, =1.1.0, =0.4.1, =0.0.4, =0.8.2, =0.11.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

aquests (>=0.7.16.17, <=0.7.16.18), backend-ai-common (1.3.1) +6 more potentially affected by CVE-2025-4565 via protobuf (3.5.2.post1)

protobuf PYPI version 3.5.2.post1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aquests =0.7.16.17, =1.3.2, =1.1.0, =0.4.1, =0.0.4, =0.8.2, =0.11.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

admobilizeapis (>=0.0.5, <=0.0.7), c3-reference (1.8.1) +8 more potentially affected by CVE-2025-4565 via protobuf (3.6.0)

protobuf PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - admobilizeapis =0.0.5, =1.1.4, =1.0.5, =1.9.1, =1.10.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

Malicious code in mflux-streamlit (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of mflux-streamlit were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials an...

PYSEC-2026-582 Malicious code in mflux-streamlit (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of mflux-streamlit were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates credentials...