ablator (0.0.1b3), apollo-sdk (>=0.2.0, <=0.2.11) +29 more potentially affected by CVE-2026-102925 via virtualenv (20.21.0)

virtualenv PYPI version 20.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ablator 0.0.1b3 - apollo-sdk =0.2.0, =0.8.3b20231012, =0.8.3b20231012, =0.6.1, =1.2.1, =0.1.3, =0.7.2, =0.2.8, =0.0.1, =1.7.16, =0.4.0rc6,...

5gasp-cli (>=0.1.0, <=0.4.0), appcensus-dynamic-repos (0.6.1.91) +33 more potentially affected by CVE-2026-102925 via virtualenv (20.21.1)

virtualenv PYPI version 20.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - 5gasp-cli =0.1.0, =1.1.2, =1.3.0rc1, =1.5.9, =2.3.0, =0.0.88, =0.7.7, =1.0.3, =24.9.958497, =0.5.2, =0.6.0, =0.6.4 and more Source cves:...

baotool (1.0.1), farcaster-py (>=0.0.2, <=0.0.4) +6 more potentially affected by CVE-2026-102925 via virtualenv (20.24.5)

virtualenv PYPI version 20.24.5 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - baotool 1.0.1 - farcaster-py =0.0.2, =2.0.0, =0.103.0, =0.1.0, =1.0.0, =1.3.1 - zoish 4.6.0 Source cves: CVE-2026-102925 Source advisory:...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102925 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), hmd-cli-repo (>=0.3.149, <=0.3.165) +4 more potentially affected by CVE-2026-102925 via virtualenv (20.30.0)

virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

appcensus-dynamic-repos (>=2.0.113, <=2.1.117), microscopemetrics (0.2.4) +11 more potentially affected by CVE-2026-102925 via virtualenv (20.32.0)

virtualenv PYPI version 20.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - appcensus-dynamic-repos =2.0.113, =0.6.0, =1.0.0, =0.1.1, =0.5.4, =1.0.1, =1.0.119 Source cves: CVE-2026-102925 Source advisory:...

foxbms-fox-cli (1.12.0), ironoc-pytest-conor-heffron (>=2.3.4, <=2.5.1) +8 more potentially affected by CVE-2026-102925 via virtualenv (>=21.1.0, <=21.7.4)

virtualenv PYPI version =21.1.0, =2.3.4, =0.1.4, =0.1.0, =0.3.1, =0.0.3, =1.5.1, =1.1.0, =1.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-102925 Source advisory: OSV:PYSEC-2026-4013...

Malicious code in zero-baileys (npm)

Source: amazon-inspector 58d472a4390be835fc8ffd5e62a7d3b2bb7270ad6ea651d9cd15bc7abd7735c8 package.json redirects the libsignal dependency to npm:@otaxayun/libsignal-node@latest. The @latest dist-tag is mutable and unpinned, so each npm install of zero-baileys resolves whatever tarball the @otaxay...

im-openai (>=0.8.3, <=0.9.2), pollboy (>=0.3.0, <=0.4.0) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.24.3)

virtualenv PYPI version 20.24.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - im-openai =0.8.3, =0.3.0, =0.4.0 - pubsub-library 0.2.0 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

pip-faster (>=1.0.0rc1, <=1.0.0rc6.dev4) potentially affected by CVE-2026-102937 via virtualenv (1.11.6)

virtualenv PYPI version 1.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pip-faster =1.0.0rc1, =1.0.0rc6.dev4 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

dcoscli (>=0.1.1, <=0.1.8) potentially affected by CVE-2026-102937 via virtualenv (12.1.1)

virtualenv PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.1, =0.1.8 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

dcoscli (>=0.1.9, <=0.4.6), python-mu (>=1.0.1, <=1.0.3) +1 more potentially affected by CVE-2026-102930 via virtualenv (13.1.2)

virtualenv PYPI version 13.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.9, =1.0.1, =0.2.23, =0.2.34 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

dcoscli (>=0.1.9, <=0.4.6), python-mu (>=1.0.1, <=1.0.3) +1 more potentially affected by CVE-2026-102937 via virtualenv (13.1.2)

virtualenv PYPI version 13.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - dcoscli =0.1.9, =1.0.1, =0.2.23, =0.2.34 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

debpackager (>=0.1.0, <=0.2.1), scriptworker (0.2.1) +1 more potentially affected by CVE-2026-102937 via virtualenv (15.0.2)

virtualenv PYPI version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - debpackager =0.1.0, =0.2.35, =1.1.0 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

fzpycreate (>=0.0.12, <=2.0.0), neo-python (0.8.4) potentially affected by CVE-2026-102930 via virtualenv (16.2.0)

virtualenv PYPI version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - fzpycreate =0.0.12, =2.0.0 - neo-python 0.8.4 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

ddwrt-tracker (>=0.0.1.dev33, <=0.0.1.dev34), dokos-cli (>=2.0.0, <=2.1.0) +3 more potentially affected by CVE-2026-102937 via virtualenv (16.6.0)

virtualenv PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ddwrt-tracker =0.0.1.dev33, =2.0.0, =5.0.0, =0.0.0, =0.0.0, =1.9.1 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

akc-mamba (>=2.0.1, <=2.0.2), pangsitpy (0.0.3) potentially affected by CVE-2026-102930 via virtualenv (16.7.9)

virtualenv PYPI version 16.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - akc-mamba =2.0.1, =2.0.2 - pangsitpy 0.0.3 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

lftools (0.31.2) potentially affected by CVE-2026-102930 via virtualenv (20.0.9)

virtualenv PYPI version 20.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - lftools 0.31.2 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...

lftools (0.31.2) potentially affected by CVE-2026-102937 via virtualenv (20.0.9)

virtualenv PYPI version 20.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - lftools 0.31.2 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...

bitdust-p2p (>=0.0.2, <=0.0.3), dweather-client (>=1.1.0, <=1.3.0) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.0.21)

virtualenv PYPI version 20.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - bitdust-p2p =0.0.2, =1.1.0, =0.2.3, =0.2.5 Source cves: CVE-2026-102930 Source advisory: OSV:PYSEC-2026-4011...