aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +281 more potentially affected by CVE-2026-59980 via hpack (3.0.0)

hpack PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - aapns =19.11.0, =0.1.0, =0.0.1, =0.4.0, =0.4.0, =2.1.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.2, =0.3.6, =0.5.0, =0.0.1, =0.0.2 and more Source cve...

h2 (1.0.0) potentially affected by CVE-2026-59980 via hpack (1.1.0)

hpack PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 1.0.0 Source cves: CVE-2026-59980 Source advisory: OSV:GHSA-8V8H-HG4W-MVQ2...

brad-agent (>=0.1.33, <=0.1.34) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (0.1.1)

langchain-nvidia-ai-endpoints PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - brad-agent =0.1.33, =0.1.34 Source cves: unknown CVE Source advisory: OSV:GHSA-G28H-2CMM-RJ9X...

nvidia-nat-langchain (>=1.4.0a20260103, <=1.5.0a20260122), nvidia-pipecat (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (1.0.4)

langchain-nvidia-ai-endpoints PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - nvidia-nat-langchain =1.4.0a20260103, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory:...

llm-checks-common-functions (>=1.0.0, <=1.1.0) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (0.2.2)

langchain-nvidia-ai-endpoints PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - llm-checks-common-functions =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory:...

vss-ctx-rag (>=0.5.0, <=0.5.1) potentially affected by unknown CVE via langchain-nvidia-ai-endpoints (0.3.7)

langchain-nvidia-ai-endpoints PYPI version 0.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-nvidia-ai-endpoints and may be impacted: - vss-ctx-rag =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G28H-2CMM-RJ9X...

2d6io-cryptobot (0.0.1), academic-metrics (>=0.1.0b0, <=1.0.99) +1398 more potentially affected by CVE-2026-96748 via pymongo (>=3.2.0, <=4.18.1)

pymongo PYPI version =3.2.0, =0.1.0b0, =1.0.4, =0.9.0, =0.4.2, =0.3.0, =3.6.0, =0.0.1.dev0, =0.1.0, =0.1.23, =1.1.5, =1.3.2 - ai-flow 0.3.1 and more Source cves: CVE-2026-96748 Source advisory: MEND:CVE-2026-96748...

academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +1311 more potentially affected by CVE-2026-96747 via pymongo (>=3.9.0, <=4.18.1)

pymongo PYPI version =3.9.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.0.1.dev0, =0.1.0, =0.1.23, =1.1.5, =2022.9.19, =0.22.0, =0.3.0, =1.2.0 and more Source cves: CVE-2026-96747 Source advisory: SNYK:PYTHON-PYMONGO-20158824...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +137 more potentially affected by CVE-2026-57179 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57179 Source advisory: MEND:CVE-2026-57179...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +137 more potentially affected by CVE-2026-57178 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57178 Source advisory: MEND:CVE-2026-57178...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +137 more potentially affected by CVE-2026-57177 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57177 Source advisory: MEND:CVE-2026-57177...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +137 more potentially affected by CVE-2026-57175 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =2.2.0a0, =2.3.4 and more Source cves: CVE-2026-57175 Source advisory: MEND:CVE-2026-57175...

offstream (>=1.0.0, <=1.0.2), tg-autoposter (>=2.4.0, <=2.4.1) potentially affected by CVE-2026-92164 via streamlink (3.0.3)

streamlink PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - offstream =1.0.0, =2.4.0, =2.4.1 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

mlbv (>=0.0.18, <=0.0.19), streamlinkutils (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2026-92164 via streamlink (2.4.0)

streamlink PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - mlbv =0.0.18, =0.0.1, =0.0.2 - tg-autoposter 2.3.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

streamkeeper (>=1.1.0, <=2.0.1) potentially affected by CVE-2026-92164 via streamlink (1.7.0)

streamlink PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - streamkeeper =1.1.0, =2.0.1 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

gridplayer (>=0.4.0, <=0.4.3), tg-autoposter (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-92164 via streamlink (4.2.0)

streamlink PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.4.0, =3.1.1, =3.1.2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

liveproxy (>=0.0.1, <=0.1.1), pccold (>=0.12.0, <=0.32.0) potentially affected by CVE-2026-92164 via streamlink (0.14.2)

streamlink PYPI version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - liveproxy =0.0.1, =0.12.0, =0.32.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

Malicious Package

Overview crypto-trader-py is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview auclean is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cloushaar-poc-exfil-91827 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...