13462 matches found
Malicious code in telegrem (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f2186dc29d07dc851d756bae0b5d080ebe5923efe6654fdb4aa9ec55bbba9b6a The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
EUVD-2025-205458
Malicious code in telegrem PyPI...
EUVD-2025-205426
Malicious code in aiogram-3 PyPI...
EUVD-2025-205375
Malicious code in pxdbench PyPI...
EUVD-2025-205360
Malicious code in envtoolsx PyPI...
MAL-2025-192929 Malicious code in envtoolsx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8718f9207ffeca355720b0d4a59cc778fabe7879fc354837d655affac6a82321 Importing the module, downloads and starts a malicious executable identified as infostealer. Based on Telegram links, this is related to the 2025-12-synium...
EUVD-2025-205356
Malicious code in livekit-agents-hedra PyPI...
MAL-2025-192928 Malicious code in livekit-agents-hedra (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8391aaa11b2ae78ceba6cf6eea7b0671d2d21b32d838b94f4504afa13ea832ce Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14929 via transformers (>=2.10.0 <=5.9.0)
transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14929 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564275...
EUVD-2025-204780
Malicious code in lanchain-openai PyPI...
Malicious code in lanchain-openai (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4c312361541ed240dabd6df1f9cb9ed856a718dc8c8881f43bbacb429807e303 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-192699 Malicious code in lanchain-openai (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4c312361541ed240dabd6df1f9cb9ed856a718dc8c8881f43bbacb429807e303 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-192893 Malicious code in fireeye-main (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fireeye-main (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fire-eye-bcs (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192892 Malicious code in fire-eye-bcs (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192891 Malicious code in blastchamber-python-pypi (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in blastchamber-python-pypi (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Linux Distros Unpatched Vulnerability : CVE-2025-68480
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before 3.26.2 and from 4.0...