ROOT-APP-PYPI-CVE-2026-27026 CVE-2026-27026 in rootio-pypdf - Patched by Root

Root has patched CVE-2026-27026 in the rootio-pypdf package for Root:PyPI. Multiple fixed versions available...

MAL-2026-11050 Malicious code in discordnv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d28ded2ca28c0182385e9dccf5939e883fd5f18dfa702ca912429270a92f3646 The package exfiltrates Roblox cookies and Discord tokens from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in intel-cicd-repo-infrastructure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 26e9f9760ea5108609a4a105c621c9ed1ac03930e70fe4cfe400f7c256a7641a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-11046 Malicious code in intel-cicd-repo-infrastructure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 26e9f9760ea5108609a4a105c621c9ed1ac03930e70fe4cfe400f7c256a7641a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-11047 Malicious code in karpatkey (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b434ae7cf6afb9ce18a54757c03069983e404db695d959bd29aa628864b8349c On import karpatkey, the top-level karpatkey/init.py spawns a daemon background thread that walks the installer's home directory and collects SSH...

Malicious code in govapkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6960d465fbaca432a24450044c48aaaeb6f4c687171c4c0c4305005cccceffaf govapkg presents itself as a client for pkg.go.dev but on any use of its public API get/package/module invokes an internal helper...

PYSEC-2026-3514 PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage

PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage Summary PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.gettools: python ctx = setupdynamiccontext agent = Agent instructions="You are a data analyst.",...

ROOT-APP-PYPI-CVE-2026-28684 CVE-2026-28684 in rootio-python-dotenv - Patched by Root

Root has patched CVE-2026-28684 in the rootio-python-dotenv package for Root:PyPI. Multiple fixed versions available...

GHSA-89VP-JRXV-24W8 JupyterLab: PyPI extension blocklist package-name canonicalization bypass

JupyterLab's PyPI extension manager enforces blockedextensionsuris by comparing the requested install name to blocklist entries with a custom string normalization that is weaker than PyPI package-name canonicalization. An authenticated user can request a PyPI-equivalent spelling such as...

Malicious code in make-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 39bf40d5056dc821bcedf5fcc304e26d9e6566f5beb508b6a01874b49d32becd The package embeds encrypted code that, during import, is decrypted using an externally sourced password. The recovered code is executed and starts a bot capab...

OPENSUSE-SU-2026:11342-1 python313-3.13.14-1.1 on GA media

These are all security issues fixed in the python313-3.13.14-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2026-10986 Malicious code in comp-colors (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1aad1b8a73afbe28c708c4e19a1495793d1214980f72357a13d07b98f1f9a060 The package hides code to download and execute a remote executable from a newly created fastsyncapi.com domain. It is disguised as a remote 'fast color helper,...

ROOT-APP-PYPI-CVE-2025-27516 CVE-2025-27516 in rootio-Jinja2 - Patched by Root

Root has patched CVE-2025-27516 in the rootio-Jinja2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-34064 CVE-2024-34064 in rootio-Jinja2 - Patched by Root

Root has patched CVE-2024-34064 in the rootio-Jinja2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-56201 CVE-2024-56201 in rootio-Jinja2 - Patched by Root

Root has patched CVE-2024-56201 in the rootio-Jinja2 package for Root:PyPI. Multiple fixed versions available...

MAL-2026-10978 Malicious code in reimagined-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f49aaf5b1b6388b52d7afd99359db7630e272770abd123c0cfc9977c0467b78d In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2026-10976 Malicious code in colorstack (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e622a7f45c572488da7a3dcea95a8deb6a56b0dfd843cd85483373bd03fb8974 The package hides code to download and execute a remote executable from a newly created fastsyncapi.com domain. It is disguised as a remote 'fast color helper,...

MAL-2026-10975 Malicious code in rasterkit-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 29eb6057bbc11a0f0180a030db952f9ec8aa39ce8c4b0d437046b20301f5b21a During import, the code uses steganography to extract code from an image hidden in the dependency. The code then adds a new authorized SSH key and reports back...

MAL-2026-10929 Malicious code in trongrider (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d44486dc374cb50abaad84a7086859ce3c2a7e5b17a790aae5b426c4cf2a1e0 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2026-10918 Malicious code in automatic-octo-invention (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9601d13b646d0f31e4053a8f1d2b159cba6c30b1860a67da0baa3d7d7086d9c4 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...