MAL-2024-12349 Malicious code in spl-types (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62ae4c4e03f2865a43a463427c66b7131a5c981b645d24d246d93435347e5819 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

Malicious code in bussardweg4av3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ce407c0de96eb20cc6cb45203675e913575a71f8c1b64604964e9a43d9d5809e --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

Malicious code in tlsclient-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6127 Malicious code in testpipxyz3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pyreqs3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pycalculate (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5596 Malicious code in py-cofrd (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5445 Malicious code in packagemernado (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5434 Malicious code in okinalek (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5183 Malicious code in glovo-data-platform-importer-brain (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ef323refefeffe (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in discordpy-v3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4909 Malicious code in colarify (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in adv2099m3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1547 Malicious code in requestn (PyPI)

This package is considered malicious because it extracts OS files of the localhost and sends the contents to an unknown Telegram channel...

CVE-2024-26151 Potentially untrusted input is rendered as HTML in final output

The mjml PyPI package, found at the FelixSchwarz/mjml-python GitHub repo, is an unofficial Python port of MJML, a markup language created by Mailjet. All users of FelixSchwarz/mjml-python who insert untrusted data into mjml templates unless that data is checked in a very strict manner. User input...

CVE-2024-23342

A flaw was found in the ecdsa PyPI package, a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman. Versions 0.18.0 and prior may be...

CVE-2024-23342

The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman. Versions 0.18.0 and prior are vulnerable to the...

CVE-2024-23342 python-ecdsa vulnerable to Minerva attack on P-256

The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman. Versions 0.18.0 and prior are vulnerable to the...

Improper Input Validation

pdm is vulnerable to Improper Input Validation. The vulnerability exists in the readlockfile function at repositories.py due to lack of input validations which allows an attacker to trick a user into installing a malicious open source PyPi package...