Malicious Package

Overview cloushaar-poc-exfil-91827 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview crypto-trader-py is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +354 more potentially affected by CVE-2026-59980 via hpack (>=1.1.0, <=4.1.0)

hpack PYPI version =1.1.0, =19.11.0, =0.1.0, =0.0.32, =0.0.1, =0.0.1, =0.4.0, =0.4.0, =2.1.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.2, =0.3.6, =0.3.8 and more Source cves: CVE-2026-59980 Source advisory: MEND:CVE-2026-59980...

MemoryOS 2.0.34 was published with a credential-stealing binary

An attacker with write access to the GitHub repository pushed maliciouscommits and tagged v2.0.34, and the project's own GitHub Actions releaseworkflow built and uploaded 2.0.34 to PyPI.Importing the package runs memos/stage0.py, which launchesa bundled sckit binary that collects...

PYSEC-2026-3987 MemoryOS 2.0.34 was published with a credential-stealing binary

An attacker with write access to the GitHub repository pushed malicious commits and tagged v2.0.34, and the project's own GitHub Actions release workflow built and uploaded 2.0.34 to PyPI. Importing the package runs memos/stage0.py, which launches a bundled sckit binary that collects credentials...

a2 (>=0.4.9, <=0.8.3), abnativ (>=1.1.0, <=1.2.9) +262 more potentially affected by CVE-2026-96804 via mlflow-skinny (>=2.1.1, <=3.14.0)

mlflow-skinny PYPI version =2.1.1, =0.4.9, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =1.12.1 - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge 1.3.14 and more Source cves: CVE-2026-96804 Source advisory:...

abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +234 more potentially affected by CVE-2026-96775 via mlflow-skinny (>=2.18.0rc0, <=3.13.0rc0)

mlflow-skinny PYPI version =2.18.0rc0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-96775 Source advisory: MEND:CVE-2026-96775...

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index PyPI repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and...

MAL-2026-16475 Malicious code in memoryos (PyPI)

On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...

PT-2026-97523

Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS versions 5.12.0 through 7.2.9 Description An authenticated actor can execute arbitrary operating system commands as the openc3 service user. The issue occurs when the set setting method at the POST /openc3-api/api endpoint is use...

Malicious code in memoryos (PyPI)

On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...

MAL-2026-16421 Malicious code in kerokwis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 118186230c3ddb5c23ae32df8fed10655f2c64939daa9a09d5ef71f16884a4f0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in kerokwis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 118186230c3ddb5c23ae32df8fed10655f2c64939daa9a09d5ef71f16884a4f0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Embedded Malicious Code

Overview @memtensor/memos-cloud-openclaw-plugin is an OpenClaw lifecycle plugin for MemOS Cloud add + recall memory Affected versions of this package are vulnerable to Embedded Malicious Code. Malicious versions of this package ship a credential-stealing dropper, published 23 September 2026. The...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Malicious versions of this package ship a credential-stealing dropper, published 23 September 2026. The payload does not run at install time, but upon invocation of the package. A language-specific loader then...

Malicious code in auclean (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535d1083af63653f3cc6befeffe23a6fd97cea9b183b95eac92779a5abcdcd9d The pip install of auclean 0.4.2 runs a custom setup.py buildpy command that chmod 0755's and executes a 1.8MB bundled Rust ELF binary...

homeassistant-stubs (2022.3.1), pytest-homeassistant-custom-component (0.7.0) potentially affected by CVE-2026-91130 via homeassistant (2022.3.1)

homeassistant PYPI version 2022.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.1 - pytest-homeassistant-custom-component 0.7.0 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2022.3.0b4), pytest-homeassistant-custom-component (0.6.19) potentially affected by CVE-2026-91130 via homeassistant (2022.3.0b4)

homeassistant PYPI version 2022.3.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b4 - pytest-homeassistant-custom-component 0.6.19 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2022.3.0b5), pytest-homeassistant-custom-component (0.6.20) potentially affected by CVE-2026-91130 via homeassistant (2022.3.0b5)

homeassistant PYPI version 2022.3.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b5 - pytest-homeassistant-custom-component 0.6.20 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2022.3.0b6), pytest-homeassistant-custom-component (0.6.21) potentially affected by CVE-2026-91130 via homeassistant (2022.3.0b6)

homeassistant PYPI version 2022.3.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b6 - pytest-homeassistant-custom-component 0.6.21 Source cves: CVE-2026-91130 Source advisory:...