10509 matches found
MAL-2026-14588 Malicious code in yaml-report-formatter (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...
Malicious code in yaml-report-formatter (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...
AuraBorealisApp
AuraBorealis: Sai cosa c'è nei tuoi pacchetti Python? Informazioni AuraBorealis è un'applicazione web per visualizzare codice anomalo e potenzialmente malevolo nei registri dei pacchetti Python. Utilizza dati di audit di sicurezza prodotti dalla scansione del Python Package Index PyPI tramite Aur...
ROOT-APP-PYPI-GHSA-27JP-WM6Q-GP25 GHSA-27jp-wm6q-gp25 in sqlparse - Patched by Root
Root has patched GHSA-27jp-wm6q-gp25 in the sqlparse package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-4340 CVE-2024-4340 in sqlparse - Patched by Root
Root has patched CVE-2024-4340 in the sqlparse package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-62QF-JCQ8-8GXW GHSA-62qf-jcq8-8gxw in sqlparse - Patched by Root
Root has patched GHSA-62qf-jcq8-8gxw in the sqlparse package for Root:PyPI. Multiple fixed versions available...
aztarna
This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...
atomic-operator
license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...
aura
Questo repository è stato spostato in una nuova posizione: https://github.com/SourceCode-AI/aura Security Auditing e introspezione del codice Informazioni sul problema La tendenza attuale nello sviluppo è quella di utilizzare molti pacchetti nella fase di sviluppo, anche se forniscono solo...
osinteye
This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: root@kitploit: $ git clone...
ipmap
English readme • 简体中文 readme • 正體中文 readme • Lengua española readme • Deutsche readme • Svenska readme • 한국어 readme • Français readme • हिन्दी readme • Português readme • Italian readme • • • • • •...
crlfi
Badge Licenza MIT Installazione...
MAL-2026-14555 Malicious code in ekx-report-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...
Malicious code in pybitjs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611713d33cb9efee440b0a416812cbb2ceda3d43c0cdc73c1f8b353400209df5 The package's setuptools cmdclasses BuildPy, Develop invoke node pybitjs/js/main.js during pip install, and write a pybitjs.pth file containing impor...
MAL-2026-14545 Malicious code in pybitjs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611713d33cb9efee440b0a416812cbb2ceda3d43c0cdc73c1f8b353400209df5 The package's setuptools cmdclasses BuildPy, Develop invoke node pybitjs/js/main.js during pip install, and write a pybitjs.pth file containing impor...
Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
Summary The PyPI account that publishes pantheon-agents was compromised in the June 2026 "Hades" PyPI supply-chain attack Mini Shai-Hulud / Miasma lineage. The attacker used a stolen, long-lived PyPI API token to upload trojanized releases pantheon-agents 0.6.1 and 0.6.2 directly to PyPI. Only th...
MAL-2026-14516 Malicious code in minecraft-ytreceiver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...
Malicious code in minecraft-ytreceiver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...