10632 matches found
Malicious code in pyjstat-smooth (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65efaaf25b41d789624595550d966762b21747205b23f15325db2e05924387d The package advertised as a JSON-stat library ships a test module that, when the test suite is executed, walks the /app and /Users directory trees,...
crlfi
Insignias Licencia MIT Instalación...
citrix-netscaler-memory-leak
Insignias Licencia MIT...
MAL-2026-16264 Malicious code in aiosendletter (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29baa6f2cbfb2ef9907be7830505e33e82b5a1e6a45eb7f995022d09f5841f09 The package advertises itself as a 'safe bug reporter' but its init function archives the contents of %LOCALAPPDATA%\logs with shutil.makearchive and...
CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-
CVE-2026-21016 – Hook malicioso de instalación de paquetes PyPI ejecución de setup.py Código del programa Python root@kitploit: setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup...
shai-scan
shai-scan Escáner CLI sin dependencias para compromisos en la cadena de suministro de npm y PyPI. ¿Por qué? El 11 de mayo de 2026, un gusano de cadena de suministro autopropagante denominado Mini Shai-Hulud CVE-2026-45321, GHSA-g7cv-rxg3-hmpx comprometió el ecosistema de npm. Atribuido a TeamPCP...
MAL-2026-16250 Malicious code in marketing-mcp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87216e00fe68e2de8b140f1f9ffc2db5a8e814f38030e2eb6120c9ae9e7ca3ff The package exposes an MCP tool sendpath that reads a caller-specified local file and POSTs its contents to a hardcoded...
Malicious code in trongappy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145727605bb141edc0fa9697253b211a1b0e467db2a484a2cedd163bcc6df1b7 The package exposes a single public function permprivatekey that POSTs its privatekey argument as JSON to the hardcoded URL...
MAL-2026-16242 Malicious code in trongappy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145727605bb141edc0fa9697253b211a1b0e467db2a484a2cedd163bcc6df1b7 The package exposes a single public function permprivatekey that POSTs its privatekey argument as JSON to the hardcoded URL...
MAL-2026-16241 Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486630eaee2b9eb50d03d73886a14b7249b0c28fda2cb3f6a13565c8cd38a9bb pypi package rak-lab-yoav-orca-zrktd2cp5hjmo4x7 version 9.9.9 ships a setup.py that, during pip install, reads the DEPLOYMENTTOKEN environment variab...
Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486630eaee2b9eb50d03d73886a14b7249b0c28fda2cb3f6a13565c8cd38a9bb pypi package rak-lab-yoav-orca-zrktd2cp5hjmo4x7 version 9.9.9 ships a setup.py that, during pip install, reads the DEPLOYMENTTOKEN environment variab...
Malicious code in praetorian-mind-rce-test-2026 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a16a607fd396ce7218fb45728cb3ca55f541326c83a063668a7a170b46acc1 At pip install time, setup.py calls a phonehome routine at module top-level before setup runs. The routine collects extensive host and container...
MAL-2026-16240 Malicious code in praetorian-mind-rce-test-2026 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a16a607fd396ce7218fb45728cb3ca55f541326c83a063668a7a170b46acc1 At pip install time, setup.py calls a phonehome routine at module top-level before setup runs. The routine collects extensive host and container...
ROOT-APP-PYPI-CVE-2024-6345 CVE-2024-6345 in setuptools - Patched by Root
Root has patched CVE-2024-6345 in the setuptools package for Root:PyPI. Multiple fixed versions available...
Malicious code in licloud (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 380753d9b58e068e84b5bd87242ad31e4b833cdcc056021925aa2dcc91633b46 setup.py unconditionally collects the installer's OS name, username, and hostname and POSTs them to a hardcoded plain-HTTP bare-IP endpoint...
MAL-2026-16219 Malicious code in licloud (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 380753d9b58e068e84b5bd87242ad31e4b833cdcc056021925aa2dcc91633b46 setup.py unconditionally collects the installer's OS name, username, and hostname and POSTs them to a hardcoded plain-HTTP bare-IP endpoint...
Malicious code in cli-anything-ai-market (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5319f74a06670d40b020831dae38da696aa966dc1fdfde45063abb0024df922 setup.py runs automatically during pip install and POSTs the installer's OS, username USER/USERNAME, and hostname via COMPUTERNAME on Windows or the...
honeypot-auditor
root@kitploit: .. | :: H-AUDITOR :: v0.9.5 :: "DIALING IN... CARRIER DETECTED" :: | |------------------------------------------------------------------------------| | "warez? nah. headers. we trade banners, not bins." | | "if it answers any password, it ain't production — it's a lure." | | "respe...
mini-shai-hulud-scanner
Mini Shai-Hulud Scanner 一个免费、离线的扫描器，用于检测当前正在吞噬主要软件包的 npm/PyPI 供应链蠕虫。由 Intrudify 团队开发。无需注册，无遥测，完全离线运行。 NHS CC-4781 · CVE-2026-45321 CVSS 9.6 · GHSA-g7cv-rxg3-hmpx 这是什么 如果你在过去几周内运行过 npm install 或 pip install，那么这与你相关。 特别是如果你接触过 @tanstack/、@uipath/、@mistralai/、@cap-js/，或者 PyPI 上的...