MAL-2026-5679 Malicious code in pylogxo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeee018f429f5a978b85aa3999c8e24251a85dc787b1e4fd673abcabf157800 On import pylogx, the package spawns a background thread that sleeps 5-20 seconds, force-installs sensitive third-party packages cryptography,...

CGA-Q8M8-3PPV-93JJ

Bulletin has no description...

CVE-2026-53819

OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. Attackers with access to trusted operator workspaces can execute unintended Homebrew-compatible executables during skill...

CVE-2026-53813

OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolution. Attackers with access to affected workspaces can load memory-core artifacts from unintended local locations, potentially executing...

CGA-56FQ-X5P7-586J

Bulletin has no description...

CGA-XGX2-MP3V-PXH4

Bulletin has no description...

CGA-WWH4-9H2X-3GPJ

Bulletin has no description...

CGA-J5XP-9RPP-GM2V

Bulletin has no description...

CGA-2GGC-GMFQ-J9R9

Bulletin has no description...

CGA-CH7P-JX7G-249M

Bulletin has no description...

CGA-G6RP-W7VW-778R

Bulletin has no description...

CGA-G8Q3-M2JV-CP8J

Bulletin has no description...

CGA-PQR3-GF47-4PG6

Bulletin has no description...

CGA-P4GF-FG2Q-QHJ4

Bulletin has no description...

CGA-7JC2-2R27-H25H

Bulletin has no description...

CGA-J5MW-MPW3-MWCV

Bulletin has no description...

CGA-4VW9-48RH-5CP5

Bulletin has no description...

CGA-QVP9-HX5H-CPG4

Bulletin has no description...

CGA-5W49-RR55-JW29

Bulletin has no description...

CGA-GG39-45FX-47GC

Bulletin has no description...