MAL-2026-17847 Malicious code in npp-ml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f575d02caf2363703b49c45c7f5ba106b798ee4f5b02f1977b118f2b52ff30e The package claims to provide a Notepad++ distribution, but in fact delivers ADExplorer, an Active Directory analysis tool. --- Category: MALICIOUS - The...

ROOT-APP-PYPI-CVE-2026-54060 CVE-2026-54060 in pillow - Patched by Root

Root has patched CVE-2026-54060 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59205 CVE-2026-59205 in pillow - Patched by Root

Root has patched CVE-2026-59205 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59200 CVE-2026-59200 in pillow - Patched by Root

Root has patched CVE-2026-59200 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59199 CVE-2026-59199 in pillow - Patched by Root

Root has patched CVE-2026-59199 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-55380 CVE-2026-55380 in pillow - Patched by Root

Root has patched CVE-2026-55380 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54058 CVE-2026-54058 in pillow - Patched by Root

Root has patched CVE-2026-54058 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59203 CVE-2026-59203 in pillow - Patched by Root

Root has patched CVE-2026-59203 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59197 CVE-2026-59197 in pillow - Patched by Root

Root has patched CVE-2026-59197 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42310 CVE-2026-42310 in pillow - Patched by Root

Root has patched CVE-2026-42310 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42309 CVE-2026-42309 in pillow - Patched by Root

Root has patched CVE-2026-42309 in the pillow package for Root:PyPI. Multiple fixed versions available...

Malicious code in minecraftaccfinder (PyPI)

Source: kam193 f519431018ad36a66a7726c8d5ba41ce446a4a6902afdbefbb4de4897eb2f502 During import, the code installs a persistent inforstealer / RAT. The code first exfiltrates multiple credentials targeting especially Gmail, Roblox, Discord, and Minecraft and then opens a port and listens for furthe...

ROOT-APP-PYPI-CVE-2023-50447 CVE-2023-50447 in pillow - Patched by Root

Root has patched CVE-2023-50447 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-56PW-MPJ4-FXWW GHSA-56pw-mpj4-fxww in pillow - Patched by Root

Root has patched GHSA-56pw-mpj4-fxww in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-28219 CVE-2024-28219 in pillow - Patched by Root

Root has patched CVE-2024-28219 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-43804 CVE-2023-43804 in urllib3 - Patched by Root

Root has patched CVE-2023-43804 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-AIKIDO-2026-499214 AIKIDO-2026-499214 in urllib3 - Patched by Root

Root has patched AIKIDO-2026-499214 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

MAL-2026-17866 Malicious code in pyyi (PyPI)

The verified PyPI wheel declares a console command named python2 pyyi.cli:main. For commands other than the local REPL, help, version, unlock, or uninstall paths, it obtains configuration and calls runpayload. Registration sends the hostname and OS to a configured space-z.ai server and stores the...

Malicious code in minecraftaccfinder (PyPI)

minecraftaccfinder was published to PyPI on 2026-10-12 in six versions within 23 minutes 0.1.2 at 01:05 UTC, 2.0.0, 0.3.0, 0.3.1, 0.4.0, 3.0.0 at 01:28 UTC with no description, author, README or project page. The package consists of one module, minecraftaccfinder/init.py about 87 KB, 88 functions...

MAL-2026-17809 Malicious code in minecraftaccfinder (PyPI)

minecraftaccfinder was published to PyPI on 2026-10-12 in six versions within 23 minutes 0.1.2 at 01:05 UTC, 2.0.0, 0.3.0, 0.3.1, 0.4.0, 3.0.0 at 01:28 UTC with no description, author, README or project page. The package consists of one module, minecraftaccfinder/init.py about 87 KB, 88 functions...