Malicious code in package-resources (PyPI)

Source: kam193 ca5a9eea6d70ca2932b87cad82f57aa47d4ca38f9ba6c9d2f45d465b46c8358f Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to 2025-06-stubsout using the same remote domain, but without...

CVE-2026-49187

The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse...

PYSEC-2010-29

Multiple cross-site scripting XSS vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to 1 paste.urlparser.StaticURLParser, 2...