Malicious code in puregram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7bd190edcbb3734a8578c4e0c5dbd9655bc59613d53e67bfd04b3604cf1aa328 The code is automatically starting, calling a Telegram channel with basic info, and waits for remote code to execute --- Category: MALICIOUS - The campaign has...

Malicious code in tronpyapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3937a7f13d0db04c75985a870ed1eec73aaaff23ce5c45d9fcb64a239576cfc7 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in dbindicator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7728e8fd1f3038b080b037908fea583383e6418d0aeb819e4b41b2b812b0b9d4 Code download and executes a remote script. At the time of analysis, the remote code just runs a notepad - as so classified as a pentest/research. --- Category...

Malicious code in node-db-indicator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c9a18fe9ea04133e7de33313046092ffb5e8ccef6c1bf5f44e9b6d5e3835aa2 Code download and executes a remote script. At the time of analysis, the remote code just runs a notepad - as so classified as a pentest/research. --- Category...

Malicious code in web3toolkit-base (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bdfcb6d5feffbd89fd13ed27d03b0bf7c14970f09ceeb202f8b36703fec6e907 Code monitors the clipboard and when detects a cryptocurrency wallet, attempts to overwrite it with the own address. --- Category: MALICIOUS - The campaign has...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +88 more potentially affected by CVE-2025-6211 via llama-index (>=0.4.17, <=0.12.38)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2025-6211 Source advisory: SNYK:PYTHON-LLAMAINDEX-10691925...

llama-index-packs-docugami-kg-rag (>=0.1.1, <=0.2.0) potentially affected by CVE-2025-6211 via llama-index-readers-docugami (0.1.4)

llama-index-readers-docugami PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on llama-index-readers-docugami and may be impacted: - llama-index-packs-docugami-kg-rag =0.1.1, =0.2.0 Source cves: CVE-2025-6211 Source advisory:...

llama-index-packs-docugami-kg-rag (>=0.1.1, <=0.2.0) potentially affected by CVE-2025-6211 via llama-index-readers-docugami (0.1.4)

llama-index-readers-docugami PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on llama-index-readers-docugami and may be impacted: - llama-index-packs-docugami-kg-rag =0.1.1, =0.2.0 Source cves: CVE-2025-6211 Source advisory:...

llama-index-packs-docugami-kg-rag (>=0.1.1, <=0.2.0) potentially affected by CVE-2025-6211 via llama-index-readers-docugami (0.1.4)

llama-index-readers-docugami PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on llama-index-readers-docugami and may be impacted: - llama-index-packs-docugami-kg-rag =0.1.1, =0.2.0 Source cves: CVE-2025-6211 Source advisory:...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +88 more potentially affected by CVE-2025-6211 via llama-index (>=0.4.17, <=0.12.38)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2025-6211 Source advisory: GHSA-5HQ9-5R78-2GJH...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +88 more potentially affected by CVE-2025-6211 via llama-index (>=0.4.17, <=0.12.38)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2025-6211 Source advisory: OSV:GHSA-5HQ9-5R78-2GJH...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +88 more potentially affected by CVE-2025-6211 via llama-index (>=0.4.17, <=0.12.38)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2025-6211 Source advisory: MEND:CVE-2025-6211...

llama-index-packs-docugami-kg-rag (>=0.1.1, <=0.2.0) potentially affected by CVE-2025-6211 via llama-index-readers-docugami (0.1.4)

llama-index-readers-docugami PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on llama-index-readers-docugami and may be impacted: - llama-index-packs-docugami-kg-rag =0.1.1, =0.2.0 Source cves: CVE-2025-6211 Source advisory:...

PT-2025-29091

Name of the Vulnerable Software and Affected Versions: llama index versions up to 0.12.28 Description: A vulnerability exists in the DocugamiReader class of the llama index repository. The use of MD5 hashing to generate IDs for document chunks can lead to hash collisions when structurally distinc...

SUSE CVE-2025-38239

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix invalid node index On a system with DRAM interleave enabled, out-of-bound access is detected: megaraidsas 0000:3f:00.0: requested/available msix 128/128 pollqueue 0 ------------ cut here ------------ UBSAN:...

Malicious code in graphdict (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6536224bd962025c65671a0007df1998dbc9485dfb2d628b0a0d57ab916487e Malicious clone of legitimate networkx package with added hidden encrypted code. The exact behaviour unclear as it uses decryption key based on the arguments a...

MAL-2025-6515 Malicious code in graphdict (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6536224bd962025c65671a0007df1998dbc9485dfb2d628b0a0d57ab916487e Malicious clone of legitimate networkx package with added hidden encrypted code. The exact behaviour unclear as it uses decryption key based on the arguments a...

Malicious code in cryptob (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d0ee1f01fb1d9fe3ac1d88bec06c858d0c3e33f2531e7ca1afb30177f0b85e84 Importing starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-cryptoo Reasons based...

Malicious code in cryptoo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f63e4b5c515be094f240f956e15464da0258bdd6948006f25419be60138b4764 Importing starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-07-cryptoo Reasons based...

AZL-64856 CVE-2025-38239 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix invalid node index On a system with DRAM interleave enabled, out-of-bound access is detected: megaraidsas 0000:3f:00.0: requested/available msix 128/128 pollqueue 0 ------------ cut here ------------ UBSAN:...