aana (>=0.2.1, <=0.2.2.2), ado-vllm-performance (>=1.2.2, <=1.3.3) +102 more potentially affected by CVE-2026-100648 via vllm (>=0.5.5, <=0.28.0)

vllm PYPI version =0.5.5, =0.2.1, =1.2.2, =2.3.5.dev0, =0.2.2, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =1.0.1rc1, =0.2.13, =0.1.0, =0.1.0a0, =0.0.2, =0.2.31 and more Source cves: CVE-2026-100648 Source advisory: MEND:CVE-2026-100648...

ado-vllm-performance (>=1.2.2, <=1.3.3), agilerl (>=2.3.5.dev0, <=2.4.1.dev1) +44 more potentially affected by CVE-2026-100647 via vllm (>=0.9.0, <=0.28.0)

vllm PYPI version =0.9.0, =1.2.2, =2.3.5.dev0, =0.1.0, =0.1.0, =1.0.1rc1, =1.1.2, =0.0.4, =0.1.0, =0.3.9.post2, =0.5.2, =0.1.5, =1.0.0.dev0, =1.0.3 - hedge-bench 0.1.2 and more Source cves: CVE-2026-100647 Source advisory: MEND:CVE-2026-100647...

0xpwn (0.1.1), a2a-acl (>=0.0.14, <=0.1.1) +982 more potentially affected by CVE-2026-89032 via litellm (>=1.0.0, <=1.100.5)

litellm PYPI version =1.0.0, =0.0.14, =0.0.14, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0rc1, =0.1.0, =0.4.0, =0.1.0, =1.10.4, =1.3.2, =0.1.39, =0.1.55 and more Source cves: CVE-2026-89032 Source advisory: SNYK:PYTHON-LITELLM-20158379...

Malicious Package

Overview prosocks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in sherpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561bac708df60298c46df70c27282912b3955ec3fd83a23e251c268e814cdcbf The sherpy package presents itself as an OSINT command-line tool but ships all of its logic inside a 10.8 MB precompiled PyO3 native module at...

adk-tracegauge (>=0.1.0rc1, <=0.8.1), agency-swarm (>=1.10.4, <=1.11.0) +173 more potentially affected by CVE-2026-89032 via litellm (>=1.90.0, <=1.100.5)

litellm PYPI version =1.90.0, =0.1.0rc1, =1.10.4, =1.3.2, =0.4.0, =0.1.0, =0.9.1254, =0.1.134rc5, =1.1.0a20250502, =0.1.1, =0.1.1, =0.1.13, =0.1.14 and more Source cves: CVE-2026-89032 Source advisory: MEND:CVE-2026-89032...

Malicious code in tego-managed-agents-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c8a01de8d706d83a4b80b845099c11602ba778a392337cad2d9a8a40090b5d The package's custom install command serializes the entire process environment dictos.environ to JSON and POSTs it to the hardcoded endpoint...

MAL-2026-17183 Malicious code in tego-managed-agents-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c8a01de8d706d83a4b80b845099c11602ba778a392337cad2d9a8a40090b5d The package's custom install command serializes the entire process environment dictos.environ to JSON and POSTs it to the hardcoded endpoint...

MAL-2026-17181 Malicious code in reqparser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 982923c14e644e82a839621d37715fd123568fc378aed45b6afa6247bc0b5054 During the module import, the package starts an infostealer. It exfiltrates data from crypto currency wallets and web browsers, ensures persistence and install...

Malicious code in reqparser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 982923c14e644e82a839621d37715fd123568fc378aed45b6afa6247bc0b5054 During the module import, the package starts an infostealer. It exfiltrates data from crypto currency wallets and web browsers, ensures persistence and install...

Malicious code in vercel-runtime-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59b48451cf996ea42b291d60ed56205aeb9803222d156f7880fd6b92032b1c6 The package presents itself as a Vercel Python runtime helper but ships no runtime functionality. Its only substantive code path is a public function...

MAL-2026-17168 Malicious code in vercel-runtime-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59b48451cf996ea42b291d60ed56205aeb9803222d156f7880fd6b92032b1c6 The package presents itself as a Vercel Python runtime helper but ships no runtime functionality. Its only substantive code path is a public function...

MAL-2026-17167 Malicious code in prosocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2bf0fd5f445eed9825601f2b4497502054176d106d4fecb9eabf38312dd582 prosocks 1.0.25 enrolls the installer's host as a remote-controlled SOCKS5 exit node under a hardcoded control plane at https://kalnetz.store...

Malicious code in prosocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2bf0fd5f445eed9825601f2b4497502054176d106d4fecb9eabf38312dd582 prosocks 1.0.25 enrolls the installer's host as a remote-controlled SOCKS5 exit node under a hardcoded control plane at https://kalnetz.store...

argus-server (>=1.23.0, <=1.34.1), bitcaster (>=2.1.0rc1, <=2.2.0) +14 more potentially affected by CVE-2026-57179 via social-auth-core (4.8.7)

social-auth-core PYPI version 4.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - argus-server =1.23.0, =2.1.0rc1, =2.4.6, =2.0.9, =1.0.1, =0.16.0, =2024.1.0, =1.62.0, =5.7.0, =0.10.0, =5.6.0, =0.1.0, =0.12.0 a...

richie (>=2.8.0, <=2.12.0), weblate (>=4.9.0, <=4.10.1) potentially affected by CVE-2026-57179 via social-auth-core (4.1.0)

social-auth-core PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - richie =2.8.0, =4.9.0, =4.10.1 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...

gophers (>=0.0.1, <=0.0.2), gupy-framework (>=0.0.1, <=0.5.8) +2 more potentially affected by CVE-2026-57179 via social-auth-core (4.5.4)

social-auth-core PYPI version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - gophers =0.0.1, =0.0.1, =0.1.1, =2.2.0, =2.9.3 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...

rest-social-auth (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-57179 via social-auth-core (0.2.1)

social-auth-core PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - rest-social-auth =1.0.0, =1.1.0 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...

centurion-erp (>=1.28.0rc1, <=1.29.0), galaxy (>=26.0.0, <=26.0.1) +1 more potentially affected by CVE-2026-57179 via social-auth-core (4.8.3)

social-auth-core PYPI version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - centurion-erp =1.28.0rc1, =26.0.0, =3.6.0, =3.6.1 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...

linhub (0.1.1) potentially affected by CVE-2026-57179 via social-auth-core (4.4.1)

social-auth-core PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - linhub 0.1.1 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...