gridplayer (>=0.4.0, <=0.4.3), tg-autoposter (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-92164 via streamlink (4.2.0)

streamlink PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - gridplayer =0.4.0, =3.1.1, =3.1.2 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

offstream (>=1.0.0, <=1.0.2), tg-autoposter (>=2.4.0, <=2.4.1) potentially affected by CVE-2026-92164 via streamlink (3.0.3)

streamlink PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - offstream =1.0.0, =2.4.0, =2.4.1 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

mlbv (>=0.0.18, <=0.0.19), streamlinkutils (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2026-92164 via streamlink (2.4.0)

streamlink PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlink and may be impacted: - mlbv =0.0.18, =0.0.1, =0.0.2 - tg-autoposter 2.3.0 Source cves: CVE-2026-92164 Source advisory: OSV:GHSA-VF2X-4V53-PM7V...

Malicious Package

Overview cloushaar-poc-exfil-91827 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview crypto-trader-py is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview auclean is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

aapns (>=19.11.0, <=23.7.0), abq (>=0.1.0, <=0.1.4) +353 more potentially affected by CVE-2026-59980 via hpack (>=1.1.0, <=4.1.0)

hpack PYPI version =1.1.0, =19.11.0, =0.1.0, =0.0.32, =0.0.1, =0.0.1, =0.4.0, =0.4.0, =2.1.0, =0.1.0, =2.0.0, =20.3.0rc1, =0.2.1, =0.3.2, =0.3.6, =0.3.8 and more Source cves: CVE-2026-59980 Source advisory: MEND:CVE-2026-59980...

MemoryOS 2.0.34 was published with a credential-stealing binary

An attacker with write access to the GitHub repository pushed maliciouscommits and tagged v2.0.34, and the project's own GitHub Actions releaseworkflow built and uploaded 2.0.34 to PyPI.Importing the package runs memos/stage0.py, which launchesa bundled sckit binary that collects...

PYSEC-2026-3987 MemoryOS 2.0.34 was published with a credential-stealing binary

An attacker with write access to the GitHub repository pushed malicious commits and tagged v2.0.34, and the project's own GitHub Actions release workflow built and uploaded 2.0.34 to PyPI. Importing the package runs memos/stage0.py, which launches a bundled sckit binary that collects credentials...

a2 (>=0.4.9, <=0.8.3), abnativ (>=1.1.0, <=1.2.9) +262 more potentially affected by CVE-2026-96804 via mlflow-skinny (>=2.1.1, <=3.14.0)

mlflow-skinny PYPI version =2.1.1, =0.4.9, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =1.12.1 - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge 1.3.14 and more Source cves: CVE-2026-96804 Source advisory:...

abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +234 more potentially affected by CVE-2026-96775 via mlflow-skinny (>=2.18.0rc0, <=3.13.0rc0)

mlflow-skinny PYPI version =2.18.0rc0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-96775 Source advisory: MEND:CVE-2026-96775...

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index PyPI repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and...

Malicious code in memoryos (PyPI)

Source: kam193 d17530b4f32046961be6354a73139dafa5a7d73ca9f7226dcf6bb3a3510bde20 Versions 2.0.34 were compromised. The package was compromised and contains a malicious executable. First discovered by Safedep. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in kerokwis (PyPI)

Source: kam193 118186230c3ddb5c23ae32df8fed10655f2c64939daa9a09d5ef71f16884a4f0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in memoryos (PyPI)

On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...

PT-2026-97523

Name of the Vulnerable Software and Affected Versions OpenC3 COSMOS versions 5.12.0 through 7.2.9 Description An authenticated actor can execute arbitrary operating system commands as the openc3 service user. The issue occurs when the set setting method at the POST /openc3-api/api endpoint is use...

MAL-2026-16475 Malicious code in memoryos (PyPI)

On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...

Malicious code in kerokwis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 118186230c3ddb5c23ae32df8fed10655f2c64939daa9a09d5ef71f16884a4f0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-16421 Malicious code in kerokwis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 118186230c3ddb5c23ae32df8fed10655f2c64939daa9a09d5ef71f16884a4f0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in poly-check-b (PyPI)

Source: kam193 0e03276b0825e5aa683a1edd8c9a7f9947888cd03cde8c5351895a0fa3c2fba6 During installation, the package attempts to silently execute code. In analyzed versions, the payload file was missing. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...