ROOT-APP-PYPI-AIKIDO-2026-499214 AIKIDO-2026-499214 in urllib3 - Patched by Root

Root has patched AIKIDO-2026-499214 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

MAL-2026-17866 Malicious code in pyyi (PyPI)

The verified PyPI wheel declares a console command named python2 pyyi.cli:main. For commands other than the local REPL, help, version, unlock, or uninstall paths, it obtains configuration and calls runpayload. Registration sends the hostname and OS to a configured space-z.ai server and stores the...

Malicious code in minecraftaccfinder (PyPI)

minecraftaccfinder was published to PyPI on 2026-10-12 in six versions within 23 minutes 0.1.2 at 01:05 UTC, 2.0.0, 0.3.0, 0.3.1, 0.4.0, 3.0.0 at 01:28 UTC with no description, author, README or project page. The package consists of one module, minecraftaccfinder/init.py about 87 KB, 88 functions...

MAL-2026-17809 Malicious code in minecraftaccfinder (PyPI)

minecraftaccfinder was published to PyPI on 2026-10-12 in six versions within 23 minutes 0.1.2 at 01:05 UTC, 2.0.0, 0.3.0, 0.3.1, 0.4.0, 3.0.0 at 01:28 UTC with no description, author, README or project page. The package consists of one module, minecraftaccfinder/init.py about 87 KB, 88 functions...

ROOT-APP-PYPI-CVE-2026-35536 CVE-2026-35536 in tornado - Patched by Root

Root has patched CVE-2026-35536 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-82397 CVE-2026-82397 in tornado - Patched by Root

Root has patched CVE-2026-82397 in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-49853 CVE-2026-49853 in tornado - Patched by Root

Root has patched CVE-2026-49853 in the tornado package for Root:PyPI. Multiple fixed versions available...

scan-shai-hulud

scan-shai-hulud A fast, zero-dependency Bash scanner to detect whether your machine is affected by the CVE-2026-45321 "Mini Shai-Hulud" supply chain attack. On May 11, 2026, over 170 npm packages and 2 PyPI packages across TanStack, Mistral AI, UiPath, OpenSearch, and Guardrails AI were...

ROOT-APP-PYPI-GHSA-753J-MPMX-QQ6G GHSA-753j-mpmx-qq6g in tornado - Patched by Root

Root has patched GHSA-753j-mpmx-qq6g in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-QPPV-J76H-2RPX GHSA-qppv-j76h-2rpx in tornado - Patched by Root

Root has patched GHSA-qppv-j76h-2rpx in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-52804 CVE-2024-52804 in tornado - Patched by Root

Root has patched CVE-2024-52804 in the tornado package for Root:PyPI. Multiple fixed versions available...

Malicious code in py2ops (PyPI)

The package installs a console command named python2 pyops.cli:main, so it runs when someone types python2. On first run register in cli.py POSTs the hostname and OS to a space-z.ai server and keeps the returned apiKey in /.python2/config.json. Bare python2 is a real REPL that reads input with th...

tanscript-exploit-check

Mini Shai-Hulud Supply Chain Attack — IOC Checker curl -fsSL https://raw.githubusercontent.com/nkopylov/tanscript-exploit-check/main/check-tanstack-exploit.sh | bash Or clone and run locally: git clone https://github.com/nkopylov/tanscript-exploit-check.git cd tanscript-exploit-check...

pip-audit

pip-audit pip-audit es una herramienta para escanear entornos Python en busca de paquetes con vulnerabilidades conocidas. Utiliza la Base de Datos de Asesoramiento de Empaquetado de Python https://github.com/pypa/advisory-database a través de la API JSON de PyPI como fuente de informes de...

CVE-2022-0165

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-0165 Run bellow command to check CVE-2022-0165 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2021-42063

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2021-42063 Run bellow command to check CVE-2021-42063 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2023-4568

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2023-4568 Run bellow command to check CVE-2023-4568 -h Configurations 2. We integrated with the Telegram API to receive...

safety

!NOTE Únete a nosotros en SafetyCLI. Estamos contratando para varios puestos. Índice Índice Introducción Características principales Primeros pasos GitHub Action Interfaz de línea de comandos 1. Instalación 2. Iniciar sesión o registrarse 3. Ejecutar tu primer escaneo Comandos básicos Acuerdo de...

CVE-2020-3187

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2020-3187 Run bellow command to check CVE-2020-3187 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2015-7297

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2015-7297 Run bellow command to check CVE-2015-7297 -h Configurations 2. We integrated with the Telegram API to receive...