72495 matches found
Malicious code in poly-check-b (PyPI)
Source: kam193 0e03276b0825e5aa683a1edd8c9a7f9947888cd03cde8c5351895a0fa3c2fba6 During installation, the package attempts to silently execute code. In analyzed versions, the payload file was missing. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in auclean (PyPI)
Source: kam193 b337040219fb9c972fb5437f3546e662ba42d292657ad100b875c6224f152e71 During installation, the package executes embeded malicious executable. It then fingerprints the environment and network, looks for specific files, attempts to collect cloud credentials, and eventually attempts to...
Malicious code in snap-queue (PyPI)
Source: kam193 62bf582784fd41b3484157f6454ddcb6ab2ae10a5d93abeb19a5bfa5642b7e64 During installation, the package attempts to silently execute code. In analyzed versions, the payload file was missing. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in crypto-trader-py (PyPI)
Source: kam193 734dc70863cedc4f248265b79254d8bc4ac9dbbc40337ad7a5bbd45d9314500b During installation, the package attempts to silently execute code. In analyzed versions, the payload file was missing. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Malicious versions of this package ship a credential-stealing dropper, published 23 September 2026. The payload does not run at install time, but upon invocation of the package. A language-specific loader then...
Embedded Malicious Code
Overview @memtensor/memos-cloud-openclaw-plugin is an OpenClaw lifecycle plugin for MemOS Cloud add + recall memory Affected versions of this package are vulnerable to Embedded Malicious Code. Malicious versions of this package ship a credential-stealing dropper, published 23 September 2026. The...
Malicious code in auclean (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535d1083af63653f3cc6befeffe23a6fd97cea9b183b95eac92779a5abcdcd9d The pip install of auclean 0.4.2 runs a custom setup.py buildpy command that chmod 0755's and executes a 1.8MB bundled Rust ELF binary...
homeassistant-stubs (2023.8.0b1), pytest-homeassistant-custom-component (0.13.46) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.8.0b1)
homeassistant PYPI version 2023.8.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.0b1 - pytest-homeassistant-custom-component 0.13.46 Source cves: CVE-2025-62172, CVE-2026-91130 Source...
homeassistant-stubs (2022.2.0b3), pytest-homeassistant-custom-component (0.6.2) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.2.0b3)
homeassistant PYPI version 2022.2.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b3 - pytest-homeassistant-custom-component 0.6.2 Source cves: CVE-2025-62172, CVE-2026-91130 Source...
homeassistant-stubs (2023.7.1), pytest-homeassistant-custom-component (0.13.43) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.7.1)
homeassistant PYPI version 2023.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.7.1 - pytest-homeassistant-custom-component 0.13.43 Source cves: CVE-2025-62172, CVE-2026-91130 Source...
homeassistant-stubs (2022.9.7), mqtt-hass-base (>=4.0.11, <=4.0.13) +1 more potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.9.7)
homeassistant PYPI version 2022.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.7 - mqtt-hass-base =4.0.11, =4.0.13 - pytest-homeassistant-custom-component 0.11.26 Source cves:...
homeassistant-stubs (2023.8.2), pytest-homeassistant-custom-component (0.13.51) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.8.2)
homeassistant PYPI version 2023.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.2 - pytest-homeassistant-custom-component 0.13.51 Source cves: CVE-2025-62172, CVE-2026-91130 Source...
homeassistant-stubs (2023.8.0), pytest-homeassistant-custom-component (0.13.49) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.8.0)
homeassistant PYPI version 2023.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.0 - pytest-homeassistant-custom-component 0.13.49 Source cves: CVE-2025-62172, CVE-2026-91130 Source...
homeassistant-stubs (2023.8.0b4), pytest-homeassistant-custom-component (0.13.48) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.8.0b4)
homeassistant PYPI version 2023.8.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.0b4 - pytest-homeassistant-custom-component 0.13.48 Source cves: CVE-2025-62172, CVE-2026-91130 Source...
homeassistant-stubs (2022.7.3), pytest-homeassistant-custom-component (0.10.4) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.7.3)
homeassistant PYPI version 2022.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.7.3 - pytest-homeassistant-custom-component 0.10.4 Source cves: CVE-2025-62172, CVE-2026-91130 Source...
homeassistant-stubs (2022.5.0b6) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.5.0b6)
homeassistant PYPI version 2022.5.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.5.0b6 Source cves: CVE-2025-62172, CVE-2026-91130 Source advisory: OSV:GHSA-WX4M-69M9-GX3M...
homeassistant-stubs (2022.5.0b1) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.5.0b1)
homeassistant PYPI version 2022.5.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.5.0b1 Source cves: CVE-2025-62172, CVE-2026-91130 Source advisory: OSV:GHSA-WX4M-69M9-GX3M...
homeassistant-stubs (2023.7.0b2) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.7.0b2)
homeassistant PYPI version 2023.7.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.7.0b2 Source cves: CVE-2025-62172, CVE-2026-91130 Source advisory: OSV:GHSA-WX4M-69M9-GX3M...
homeassistant-stubs (2023.12.0b1), pytest-homeassistant-custom-component (0.13.79) potentially affected by CVE-2025-62172 +1 more via homeassistant (2023.12.0b1)
homeassistant PYPI version 2023.12.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.12.0b1 - pytest-homeassistant-custom-component 0.13.79 Source cves: CVE-2025-62172, CVE-2026-91130 Sour...
homeassistant-stubs (2022.3.3), pytest-homeassistant-custom-component (0.7.2) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.3.3)
homeassistant PYPI version 2022.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.3 - pytest-homeassistant-custom-component 0.7.2 Source cves: CVE-2025-62172, CVE-2026-91130 Source...