27514 matches found
MAL-2026-17881 Malicious code in py-sock2 (PyPI)
Importing py-sock2's agentaix module downloads a mutable Python file from https://raw.githubusercontent.com/anonrider404/pypl/refs/heads/main/readme.txt to a temporary .py file and launches it without a visible console on Windows. Its agentaix console entry point imports the module. The remote...
Malicious code in seapy-ops (PyPI)
In seapy-ops versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 1.1.2, an advertised local file analysis tool conceals folder collection and upload commands behind an unlock gate. Once unlocked, it recursively uploads eligible files from the working directory to a configured remote server; a hidden...
Malicious code in saeka (PyPI)
Source: kam193 67507c9821e48c6f8284a142ae4788a9624ea608f782bf254573dae4936e7a04 The package is a mass credit card checker: it checks if credit card data are real and active by abusing real online retail services. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
Malicious code in saeka (PyPI)
When a user invokes the card-checking feature, saeka sends the supplied card number, expiration month and year, and CVV as a single value to https://uncoder.eu.org/cc-checker/api.php using an HTTP POST. The package description does not disclose this external recipient or the transfer of complete...
MAL-2026-17877 Malicious code in saeka (PyPI)
When a user invokes the card-checking feature, saeka sends the supplied card number, expiration month and year, and CVV as a single value to https://uncoder.eu.org/cc-checker/api.php using an HTTP POST. The package description does not disclose this external recipient or the transfer of complete...
ROOT-APP-PYPI-CVE-2026-31899 CVE-2026-31899 in cairosvg - Patched by Root
Root has patched CVE-2026-31899 in the cairosvg package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48776 CVE-2026-48776 in langgraph-sdk - Patched by Root
Root has patched CVE-2026-48776 in the langgraph-sdk package for Root:PyPI. Multiple fixed versions available...
MAL-2026-17880 Malicious code in seapy-ops (PyPI)
In seapy-ops versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, and 1.1.2, an advertised local file analysis tool conceals folder collection and upload commands behind an unlock gate. Once unlocked, it recursively uploads eligible files from the working directory to a configured remote server; a hidden...
MAL-2026-17863 Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0ca34d571eaf519847a961f7da1f203d35f7a3c011f5fd4df3744f50a0615d2e Package attempts to collect environment variables from a specific environment, self-identified as BigQuery user-defined functions research. The final...
MAL-2026-17862 Malicious code in fontcase (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9e2c4992e5295f2b094f3c7c2b2e6c2dbc8d0d9ca6242d58318e6e1b83a4255c During import, the package downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2026-17861 Malicious code in sysdiagd (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0d396ad34176d29956d695014d261847ada859c184d7a8e7820d96087af7eafe Disguised as a system monitoring tool, the package delivers a Discord bot acting as an infostealer exfiltrating credentials, browser data, files and recording...
ROOT-APP-PYPI-CVE-2026-48710 CVE-2026-48710 in starlette - Patched by Root
Root has patched CVE-2026-48710 in the starlette package for Root:PyPI. Multiple fixed versions available...
mini-shai-hulud-scanner
Mini Shai-Hulud Scanner A free, offline scanner for the npm/PyPI supply chain worm that's currently chewing through major packages. Built by the Intrudify team. No signup, no telemetry, runs entirely offline. NHS CC-4781 · CVE-2026-45321 CVSS 9.6 · GHSA-g7cv-rxg3-hmpx What this is If you've run n...
ROOT-APP-PYPI-CVE-2025-64458 CVE-2025-64458 in django - Patched by Root
Root has patched CVE-2025-64458 in the django package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-45231 CVE-2024-45231 in django - Patched by Root
Root has patched CVE-2024-45231 in the django package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-57833 CVE-2025-57833 in django - Patched by Root
Root has patched CVE-2025-57833 in the django package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-5629 CVE-2024-5629 in pymongo - Patched by Root
Root has patched CVE-2024-5629 in the pymongo package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-66418 CVE-2025-66418 in urllib3 - Patched by Root
Root has patched CVE-2025-66418 in the urllib3 package for Root:PyPI. Multiple fixed versions available...