Malicious code in anthropic-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500869e36b3f76202b63e8db9087adcfc42c8281a27a4402a21285aabde7a511 The package publishes as anthropic-sdk and re-exports the official anthropic client's symbols from anthropic import ; re-exports of...

ROOT-APP-PYPI-CVE-2025-53366 CVE-2025-53366 in mcp - Patched by Root

Root has patched CVE-2025-53366 in the mcp package for Root:PyPI. Multiple fixed versions available...

Malicious code in zencleaner (PyPI)

When a license key is activated or deactivated in the local UI, zencleaner/webhooklogger.py posts the key, the PC name, the Windows user name and the client IP to a hardcoded Discord webhook, although the README says nothing is sent to the internet. 1.0.3 and 1.0.3.1 also look up the public IP...

MAL-2026-17629 Malicious code in zencleaner (PyPI)

When a license key is activated or deactivated in the local UI, zencleaner/webhooklogger.py posts the key, the PC name, the Windows user name and the client IP to a hardcoded Discord webhook, although the README says nothing is sent to the internet. 1.0.3 and 1.0.3.1 also look up the public IP...

Malicious code in caoxiltts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b18de964968b1d4f9333a1bcc5f247b3978f9fdc418f01f7e9a3c7bc578a62 The package advertises itself as a TTS inference helper but harness.run downloads two gzipped ELF binaries from a configurable host, verifies them...

MAL-2026-17471 Malicious code in caoxiltts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b18de964968b1d4f9333a1bcc5f247b3978f9fdc418f01f7e9a3c7bc578a62 The package advertises itself as a TTS inference helper but harness.run downloads two gzipped ELF binaries from a configurable host, verifies them...

Malicious Package

Overview infrabench is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-17469 Malicious code in infrabench (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...

Malicious code in infrabench (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f8f2854fc15ef2f2a5d4c44b050aa9f3c87a7f5a832949390cf22ccd7882a6 The package's public API harness.runedge= downloads two sha256-pinned gzipped native binaries 'inference-core.bin.gz' and 'edge-conn.bin.gz' from...

MAL-2026-17470 Malicious code in voxcpmruntime (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e0220a1b37d6391262539694a04726e2e5aea888941b384c4048d0a2443b2 The package presents itself as a VoxCPM TTS runtime but is a binary dropper and cryptominer loader. harness.run downloads two executables 'voxcpm-cor...

Malicious code in voxcpmruntime (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e0220a1b37d6391262539694a04726e2e5aea888941b384c4048d0a2443b2 The package presents itself as a VoxCPM TTS runtime but is a binary dropper and cryptominer loader. harness.run downloads two executables 'voxcpm-cor...

Malicious code in voxcpmintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 28ef552864bd4b4558137163734077a2429281647a26868f40d8d735af95c967 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2026-17468 Malicious code in voxcpmintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 28ef552864bd4b4558137163734077a2429281647a26868f40d8d735af95c967 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2026-17465 Malicious code in voxcpmeval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 18746c0b1bc840ee608e3aba81f9e18e4411373b8993d315177e95614fe67b08 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in voxcpmeval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 18746c0b1bc840ee608e3aba81f9e18e4411373b8993d315177e95614fe67b08 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in voxcpmkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 92a0735c100233f803adcf4cec20645acbb5f01b1757e8889dfaa631e49dae71 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2026-17466 Malicious code in voxcpmkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 92a0735c100233f803adcf4cec20645acbb5f01b1757e8889dfaa631e49dae71 The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in voxcpmui4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c0f6ddfc6a324d42219bbea8405be17115f83eca0e2d2eecb4e3fe6b6ec3dbde The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2026-17467 Malicious code in voxcpmui4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c0f6ddfc6a324d42219bbea8405be17115f83eca0e2d2eecb4e3fe6b6ec3dbde The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2026-17464 Malicious code in voxcpmui3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9db4ea82be2cd2e2d4d7eb40236b22a9ccd0e0414cad836b98ca63468c4071e The package presents itself as a text-to-speech inference harness but contains no TTS code. On calling the exported Harness.run, the module chmods +x...