snowflake-cli-labs (3.0.0rc1) potentially affected by CVE-2025-47273 via setuptools (74.1.0)

setuptools PYPI version 74.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - snowflake-cli-labs 3.0.0rc1 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

yeedu-cli (>=4.11.0, <=4.13.0) potentially affected by CVE-2025-47273 via setuptools (64.0.0)

setuptools PYPI version 64.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - yeedu-cli =4.11.0, =4.13.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

goyabu-cli (>=1.0.7, <=1.0.15) potentially affected by CVE-2025-47273 via setuptools (64.0.1)

setuptools PYPI version 64.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - goyabu-cli =1.0.7, =1.0.15 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

vast-cli-fork (>=1.11.72, <=1.11.74) potentially affected by CVE-2025-47273 via setuptools (51.1.1)

setuptools PYPI version 51.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - vast-cli-fork =1.11.72, =1.11.74 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

colony-cli (>=1.2.13b0, <=1.3.0b0), cumulusci (>=3.32.0, <=3.32.1) +16 more potentially affected by CVE-2025-47273 via setuptools (54.2.0)

setuptools PYPI version 54.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colony-cli =1.2.13b0, =3.32.0, =0.1.0, =0.1.0, =0.0.1, =2.0.0.dev4, =0.0.1, =0.0.3, =1.4.0b0, =1.1.3, =0.5.0, =0.5.1 and more Source cves:...

m3-cli (>=3.139.1, <=4.161.0) potentially affected by CVE-2025-47273 via setuptools (68.2.1)

setuptools PYPI version 68.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - m3-cli =3.139.1, =4.161.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

Malicious code in stencil-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d683888e04619d454cbecb6bbbf03259919fb7cb2a3ac164deb94fd37938d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in stencil-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4027 Malicious code in stencil-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63d683888e04619d454cbecb6bbbf03259919fb7cb2a3ac164deb94fd37938d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

vast-cli-fork (>=1.11.72, <=1.11.74) potentially affected by CVE-2025-47273 via setuptools (51.1.1)

setuptools PYPI version 51.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - vast-cli-fork =1.11.72, =1.11.74 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

yeedu-cli (>=4.11.0, <=4.13.0) potentially affected by CVE-2025-47273 via setuptools (64.0.0)

setuptools PYPI version 64.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - yeedu-cli =4.11.0, =4.13.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

goyabu-cli (>=1.0.7, <=1.0.15) potentially affected by CVE-2025-47273 via setuptools (64.0.1)

setuptools PYPI version 64.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - goyabu-cli =1.0.7, =1.0.15 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

aitest-cli (>=0.0.7, <=0.0.9), geonode (4.4.5) potentially affected by CVE-2025-47273 via setuptools (63.0.0)

setuptools PYPI version 63.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aitest-cli =0.0.7, =0.0.9 - geonode 4.4.5 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

neo-cli (>=0.8.2, <=0.9.3), temp-ssh (0.0.1) potentially affected by CVE-2025-47273 via setuptools (37.0.0)

setuptools PYPI version 37.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - neo-cli =0.8.2, =0.9.3 - temp-ssh 0.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

snowflake-cli-labs (3.0.0rc1) potentially affected by CVE-2025-47273 via setuptools (74.1.0)

setuptools PYPI version 74.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - snowflake-cli-labs 3.0.0rc1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

colony-cli (>=1.2.13b0, <=1.3.0b0), cumulusci (>=3.32.0, <=3.32.1) +16 more potentially affected by CVE-2025-47273 via setuptools (54.2.0)

setuptools PYPI version 54.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colony-cli =1.2.13b0, =3.32.0, =0.1.0, =0.1.0, =0.0.1, =2.0.0.dev4, =0.0.1, =0.0.3, =1.4.0b0, =1.1.3, =0.5.0, =0.5.1 and more Source cves:...

carml (>=21.0.0, <=21.1.0), foliage (>=1.0.1, <=1.5.5) +7 more potentially affected by CVE-2025-47273 via setuptools (58.3.0)

setuptools PYPI version 58.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - carml =21.0.0, =1.0.1, =0.1.0, =0.2.0, =0.0.1, =0.0.4, =0.0.1, =0.0.5 - zowie 1.2.0 Source cves: CVE-2025-47273 Source advisory:...

seqslab-cli (>=3.2.1.post0, <=3.2.5) potentially affected by CVE-2025-47273 via setuptools (59.0.1)

setuptools PYPI version 59.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - seqslab-cli =3.2.1.post0, =3.2.5 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

m3-cli (>=3.139.1, <=4.161.0) potentially affected by CVE-2025-47273 via setuptools (68.2.1)

setuptools PYPI version 68.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - m3-cli =3.139.1, =4.161.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

Malicious code in cube-sign-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7b296732045296d18c9e2c5c6ea0f8feaa1bd21693f62a60cea65af5525491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...