Malicious code in sherpy (PyPI)

Source: kam193 2e5440f1e24545fd14e73c7fc459a9abf893f4674683899ed29ff7c4189416b6 When used, the package exfiltrates Chrome extension files likely targeting cryptocurrency wallets and sensitive Telegram files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

0xpwn (0.1.1), a2a-acl (>=0.0.14, <=0.1.1) +983 more potentially affected by CVE-2026-89032 via litellm (>=1.0.0, <=1.100.5)

litellm PYPI version =1.0.0, =0.0.14, =0.0.14, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0rc1, =0.1.0, =0.4.0, =0.1.0, =1.10.4, =1.3.2, =0.1.39, =0.1.55 and more Source cves: CVE-2026-89032 Source advisory: SNYK:PYTHON-LITELLM-20158379...

Malicious Package

Overview prosocks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in sherpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561bac708df60298c46df70c27282912b3955ec3fd83a23e251c268e814cdcbf The sherpy package presents itself as an OSINT command-line tool but ships all of its logic inside a 10.8 MB precompiled PyO3 native module at...

adk-tracegauge (>=0.1.0rc1, <=0.8.1), agency-swarm (>=1.10.4, <=1.11.0) +170 more potentially affected by CVE-2026-89032 via litellm (>=1.90.0, <=1.100.5)

litellm PYPI version =1.90.0, =0.1.0rc1, =1.10.4, =1.3.2, =0.4.0, =0.1.0, =0.9.1254, =0.5.2, =0.1.134rc5, =1.1.0a20250502, =0.1.1, =0.2.4 - aijson-db 0.1.1 and more Source cves: CVE-2026-89032 Source advisory: MEND:CVE-2026-89032...

Malicious code in tego-managed-agents-test (PyPI)

Source: kam193 b09488c67894dd74d043a240308c694f0e42464e3a4f371b8d5ebc8a6a589d7b During installation, the code exfiltrates all environment variables to a remote location. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in tego-managed-agents-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c8a01de8d706d83a4b80b845099c11602ba778a392337cad2d9a8a40090b5d The package's custom install command serializes the entire process environment dictos.environ to JSON and POSTs it to the hardcoded endpoint...

MAL-2026-17183 Malicious code in tego-managed-agents-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c8a01de8d706d83a4b80b845099c11602ba778a392337cad2d9a8a40090b5d The package's custom install command serializes the entire process environment dictos.environ to JSON and POSTs it to the hardcoded endpoint...

Malicious code in reqparser (PyPI)

Source: kam193 982923c14e644e82a839621d37715fd123568fc378aed45b6afa6247bc0b5054 During the module import, the package starts an infostealer. It exfiltrates data from crypto currency wallets and web browsers, ensures persistence and installs further malware. --- Category: MALICIOUS - The campaign...

MAL-2026-17181 Malicious code in reqparser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b829053417a14305f80204983289f120f71abd2472785cd4e2adfe095599003 The package name 'reqparser' resembles common HTTP client / parsing library names in the Python ecosystem, a shape frequently used by typosquat lures...

Malicious code in reqparser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b829053417a14305f80204983289f120f71abd2472785cd4e2adfe095599003 The package name 'reqparser' resembles common HTTP client / parsing library names in the Python ecosystem, a shape frequently used by typosquat lures...

Malicious code in my-private-pkg (PyPI)

Source: amazon-inspector d8008c5637dfae2dfc4162f1dd5152c5e90e03b0fc8593fda5055f44e9745b22 setup.py registers a custom install command PostInstallCommand that runs myprivatepkg/index.py automatically on pip install. That script gathers installer-side identifiers — os.getlogin, socket.gethostname,...

Malicious code in vercel-runtime-python (PyPI)

Source: kam193 5bd13c006fe4fbaf8bb81d068f6e3c822ea1e664b24d0045370aead862ccd06f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in vercel-runtime-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59b48451cf996ea42b291d60ed56205aeb9803222d156f7880fd6b92032b1c6 The package presents itself as a Vercel Python runtime helper but ships no runtime functionality. Its only substantive code path is a public function...

MAL-2026-17168 Malicious code in vercel-runtime-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59b48451cf996ea42b291d60ed56205aeb9803222d156f7880fd6b92032b1c6 The package presents itself as a Vercel Python runtime helper but ships no runtime functionality. Its only substantive code path is a public function...

Malicious code in prosocks (PyPI)

Source: kam193 a1ca37b881f19975a8ab8b23bd5e69b51355333374385aabfc5784b69bf95545 The package automatically joins the machine to a proxy network. Depending on the version, it can happen during the package installation or when importing the module. --- Category: MALICIOUS - The campaign has clearly...

MAL-2026-17167 Malicious code in prosocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2bf0fd5f445eed9825601f2b4497502054176d106d4fecb9eabf38312dd582 prosocks 1.0.25 enrolls the installer's host as a remote-controlled SOCKS5 exit node under a hardcoded control plane at https://kalnetz.store...

Malicious code in prosocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2bf0fd5f445eed9825601f2b4497502054176d106d4fecb9eabf38312dd582 prosocks 1.0.25 enrolls the installer's host as a remote-controlled SOCKS5 exit node under a hardcoded control plane at https://kalnetz.store...

rest-social-auth (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-57179 via social-auth-core (0.2.1)

social-auth-core PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - rest-social-auth =1.0.0, =1.1.0 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...

misago (>=0.39.0, <=0.39.6) potentially affected by CVE-2026-57179 via social-auth-core (4.5.1)

social-auth-core PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - misago =0.39.0, =0.39.6 Source cves: CVE-2026-57179 Source advisory: OSV:GHSA-VQG6-3FW6-J9JG...