Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/07/21 5:17 p.m.•5 views

Malicious code in dcchbot (PyPI)

Source: amazon-inspector df79831d1b486c8ca704295b410cec7b66be85aa87c3244d97ff1e87f643183a The package performs multiple installer-hostile behaviors. 1 dcchbot/init.py auto-invokes run on import, which triggers interactive input prompts and an outbound HTTPS GET to a non-PyPI third-party domain...

6.1AI score
SaveExploits0References7Affected Software1
osv_mal
osv_mal
•added 2026/05/12 7:43 a.m.•36 views

MAL-2026-3687 Malicious code in crazehub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d37c0e75f63e9da7adcc1f71f8b67a665d080342df6857a15dadc297e4f075 crazehub/init.py performs multiple user-hostile actions at import time. Lines 2-3 unconditionally run os.system"pip install phonenumbers" and...

6AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2013/07/31 12:00 a.m.•21 views

Fedora 18 : fdupes-1.51-1.fc18 (2013-13166)

Upstream - Added support for 64-bit file offsets on 32-bit systems. - Using tty for interactive input instead of regular stdin. This is to allow feeding filenames via stdin in future versions of fdupes without breaking interactive deletion feature. - Fixed some typos in --help. - Turned C++ style...

5.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2013/07/31 12:00 a.m.•20 views

Fedora 19 : fdupes-1.51-1.fc19 (2013-13176)

Upstream - Added support for 64-bit file offsets on 32-bit systems. - Using tty for interactive input instead of regular stdin. This is to allow feeding filenames via stdin in future versions of fdupes without breaking interactive deletion feature. - Fixed some typos in --help. - Turned C++ style...

5.5AI score
SaveExploits0References2
Rows per page
Query Builder