MAL-2026-17807 Malicious code in py2ops (PyPI)

The package installs a console command named python2 pyops.cli:main, so it runs when someone types python2. On first run register in cli.py POSTs the hostname and OS to a space-z.ai server and keeps the returned apiKey in /.python2/config.json. Bare python2 is a real REPL that reads input with th...

Malicious code in ig-gox (PyPI)

Source: kam193 780638a0747103eb44a85312a2cfb552981e498655f638c5baf86eb4a5f74042 Package hides obfuscated code aimed to avoid analysis and downloading the remote stage. The remote code is used to abuse Instagram service for mass fake account registration. --- Category: MALICIOUS - The campaign has...

MAL-2026-17712 Malicious code in ig-gox (PyPI)

Importing iggox runs iggox/init.py, which decodes a blob base64, XOR, zlib after a few anti-debugging checks and execs it as main. The decoded loader only goes on if it looks like a physical Android device running Termux it turns away x86, emulators and VMs, installs requests and cryptography if...

Malicious code in ig-gox (PyPI)

Importing iggox runs iggox/init.py, which decodes a blob base64, XOR, zlib after a few anti-debugging checks and execs it as main. The decoded loader only goes on if it looks like a physical Android device running Termux it turns away x86, emulators and VMs, installs requests and cryptography if...

Malicious code in kafka-roller (PyPI)

Source: ossf-package-analysis 4b68fa52500e16cab90e8038ae96e2ba1be6c448a8caa40ab3e46dc6d3c26436 The OpenSSF Package Analysis project identified 'kafka-roller' @ 99.0.0 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in kafka-helmsman (PyPI)

Source: ossf-package-analysis a2d266a2b4e9df8f2466cfb34e58fe98c636cb75d4ad1ec08cee919bd9a86588 The OpenSSF Package Analysis project identified 'kafka-helmsman' @ 99.0.1 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in kafka-helmsman (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75536e8621da28a0e941bd4a607da879a64ab71214e908992bf14840ed9a20b2 The sdist for kafka-helmsman 99.0.5 is a dependency-confusion placeholder targeting the internal Tesla project name...

MAL-2026-17702 Malicious code in kafka-helmsman (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75536e8621da28a0e941bd4a607da879a64ab71214e908992bf14840ed9a20b2 The sdist for kafka-helmsman 99.0.5 is a dependency-confusion placeholder targeting the internal Tesla project name...

Malicious code in kafka-roller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4490e03c9b281c985d7cc5c877d359f8f3789a2ec44421602137c461ac4a2a52 The package is published to PyPI under the name kafka-roller with metadata impersonating Tesla's teslamotors/kafka-helmsman project homepage points a...

MAL-2026-17703 Malicious code in kafka-roller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4490e03c9b281c985d7cc5c877d359f8f3789a2ec44421602137c461ac4a2a52 The package is published to PyPI under the name kafka-roller with metadata impersonating Tesla's teslamotors/kafka-helmsman project homepage points a...

aksharify (0.2.0), chem-eclipse (0.1.0) +55 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: OSV:GHSA-C3JG-QH8M-J3H2...

aksharify (0.2.0), chem-eclipse (0.1.0) +55 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: SNYK:PYTHON-CAIROSVG-20574178...

aksharify (0.2.0), chem-eclipse (0.1.0) +55 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: GHSA-C3JG-QH8M-J3H2...

aksharify (0.2.0), chem-eclipse (0.1.0) +55 more potentially affected by CVE-2026-107378 via cairosvg (>=2.1.3, <=2.9.0)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-107378 Source advisory: MEND:CVE-2026-107378...

agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: OSV:GHSA-77XJ-X4RM-935C...

agency-swarm (>=1.10.0, <=1.11.0), appai (1.0.1) +7 more potentially affected by CVE-2026-107377 via datamodel-code-generator (>=0.59.1, <=0.76.2)

datamodel-code-generator PYPI version =0.59.1, =1.10.0, =0.61.0, =0.7.0, =1.3.0, =0.1.1, =0.5.0, =0.1.0, =0.2.0 Source cves: CVE-2026-107377 Source advisory: GHSA-77XJ-X4RM-935C...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +18 more potentially affected by CVE-2026-107292 via pydantic-ai-slim (>=2.0.0b1, <=2.29.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0, =0.1.0rc0, =0.0.2, =0.1.12, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =2.29.0 and more Source cves: CVE-2026-107292 Source advisory: OSV:GHSA-Q2XC-RRXJ-58X9...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +16 more potentially affected by CVE-2026-107293 via pydantic-ai-slim (>=2.0.0b1, <=2.27.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0rc0, =0.0.2, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =1.0.1, =0.26.0, =0.35.0 and more Source cves: CVE-2026-107293 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20583864...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.1) +36 more potentially affected by CVE-2026-107294 via pydantic-ai-slim (>=1.77.0, <=1.107.1)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =26.1.0rc1, =26.1.0 and more Source cves: CVE-2026-107294 Source advisory: OSV:GHSA-V2XH-2VP8-57H8...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +2 more potentially affected by CVE-2026-107294 via pydantic-ai (>=2.0.0b1, <=2.23.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =0.26.0, =0.35.0 Source cves: CVE-2026-107294 Source advisory: OSV:GHSA-V2XH-2VP8-57H8...