Malicious code in doctreelstm (PyPI)

Source: kam193 9609b278449fb9d196f4929f422f22288aa202df7b8417d91053ab0180711bb8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in doctreelstm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9609b278449fb9d196f4929f422f22288aa202df7b8417d91053ab0180711bb8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in stdid-nyxprobe (PyPI)

Source: kam193 0178d6c7a642f90327546548a88f64bd17da5aa97e519249f515c0e6232c73f1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

CVE-2026-118548

Incorrect Authorization vulnerability in Drupal AI Artificial Intelligence allows Resource Injection. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

PT-2026-130577

This module enables you to use AI on the website. It also enables you to interact with AI providers. The module does not sufficiently validate links under certain conditions, potentially allowing the exfiltration of sensitive information to external sites. This vulnerability is mitigated by the...

Malicious code in zagents-framework (PyPI)

Source: kam193 d16d137f59725b57a8d4dfbb6c9e5b88a07e1bf4fac71faf28e044208a21bccd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in changes-lxc-wrapper (PyPI)

Source: kam193 6db4cc796d2ddd54fcbb0a46270cff980f711a93a5fff30675499291d9bc41f8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in zagents-framework (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d16d137f59725b57a8d4dfbb6c9e5b88a07e1bf4fac71faf28e044208a21bccd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-18327 Malicious code in zagents-framework (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d16d137f59725b57a8d4dfbb6c9e5b88a07e1bf4fac71faf28e044208a21bccd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-18326 Malicious code in changes-lxc-wrapper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d52ec1e761dd5273ea674453301163bdf6e6e60aa5074a4f075cb66eb850a4 setup.py defines a custom install cmdclass InstallWithBeacon that, on pip install, collects the installer's hostname and resolved local IP address an...

Malicious code in changes-lxc-wrapper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23181d1a705554588eb6fb03e8cee4af7e0c815e74d8b40d7bd13a39944ccae9 The distribution changes-lxc-wrapper ships a trivial package whose top-level import name is cacertificates, creating a mismatch between the...

Malicious code in zagents-message-bus (PyPI)

Source: kam193 0d1891d5d76adad51e120baa41752f0cc878b243eb400e7a12aba1616d31d1f7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in zagents-message-bus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177a91975e11b9b3afbc5089dfc7e4c4fdae1cb05f8307f397956c675533f0d8 pypi package zagents-message-bus is published at an implausibly inflated version 99.99.100 under an internal-sounding name, consistent with a...

MAL-2026-18296 Malicious code in zagents-message-bus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177a91975e11b9b3afbc5089dfc7e4c4fdae1cb05f8307f397956c675533f0d8 pypi package zagents-message-bus is published at an implausibly inflated version 99.99.100 under an internal-sounding name, consistent with a...

MAL-2026-18271 Malicious code in fontus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b8b4484126f787f9917d91b6815927146a308f64bfb852c57f5d60bf4bfbb Analysis of fontus 0.0.3 on PyPI did not identify any code paths that exfiltrate installer data, execute attacker-controlled payloads at install or...

CVE-2026-92262

A flaw was found in MariaDB. An authenticated remote attacker can supply a crafted table name with the mysql50 prefix, which bypasses normal filesystem encoding for table names. By accessing files under unencoded legacy names, the attacker can achieve arbitrary code execution, exfiltrate sensitiv...

Malicious code in moveworks-capi-starter (PyPI)

Source: kam193 2cd8f99409a87f01743f65f381fefa800176a29d47d6119743ae2bd0ce1f7583 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in moveworks-capi-starter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a1f2ebbd0f8423c7e02c1a9b0571cec02bd6d343b88583f6a85dd06a056a99 setup.py overrides the install command to collect the installer's hostname and resolved local IP address and POST them as JSON to the hardcoded URL...

MAL-2026-18122 Malicious code in moveworks-capi-starter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a1f2ebbd0f8423c7e02c1a9b0571cec02bd6d343b88583f6a85dd06a056a99 setup.py overrides the install command to collect the installer's hostname and resolved local IP address and POST them as JSON to the hardcoded URL...

Malicious code in trijigo-kalip (PyPI)

Source: kam193 37ff57e1b55bd5e84d85338fd9b0b43ae1faf44cc8a7e0e3e11387663461d52d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...