MAL-2026-7461 Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7460 Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7458 Malicious code in pycryptoshuffle (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pycryptoshuffle (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7457 Malicious code in piirgg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7456 Malicious code in notrandompacketname (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7455 Malicious code in myproject234 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7454 Malicious code in cyberday26szymon-payments (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7453 Malicious code in cyberday26szymon-logging (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7452 Malicious code in cyberday26szymon-auth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vspropertypages (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7451 Malicious code in vspropertypages (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in security_hacks (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7450 Malicious code in security_hacks (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hackney.core.enums (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hackney.core.jwt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7448 Malicious code in hackney.core.enums (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7449 Malicious code in hackney.core.jwt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1190 Apache Superset Cross-site Scripting vulnerability

Improper payload validation and an improper REST API response type, made it possible for an authenticated malicious actor to store malicious code into Chart's metadata, this code could get executed if a user specifically accesses a specific deprecated API endpoint. This issue affects Apache...

Malicious code in express-deflect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284d3f4c5f55f69391b1172ba9d2c714e3ae358a2c92a501049a1495547e1588 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...