EUVD-2025-29745

Malicious code in bioql PyPI...

EUVD-2022-55632

Malicious code in bioql PyPI...

EUVD-2022-55639

Malicious code in bioql PyPI...

EUVD-2025-29811

Malicious code in bioql PyPI...

EUVD-2022-55643

Malicious code in bioql PyPI...

EUVD-2025-29737

Malicious code in bioql PyPI...

EUVD-2023-59969

Malicious code in bioql PyPI...

EUVD-2025-25158

Malicious code in bioql PyPI...

EUVD-2024-44717

Malicious code in bioql PyPI...

[SECURITY] Fedora 43 Update: python-pip-25.1.1-18.fc43

pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Cybersecurity researchers have flagged a malicious package on the Python Package Index PyPI repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems. The deceptive...

Malicious code in emoted (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c1542aa2ac34ff34c8c27bcfa0753cb100f1779f8b6acf274ed21c36866b795 Obfuscated code contains e.g. capabilities for downloading and executing code from a hardcoded location. It's also recognized as malware --- Category: MALICIOU...

MAL-2025-48890 Malicious code in emoted (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c1542aa2ac34ff34c8c27bcfa0753cb100f1779f8b6acf274ed21c36866b795 Obfuscated code contains e.g. capabilities for downloading and executing code from a hardcoded location. It's also recognized as malware --- Category: MALICIOU...

MAL-2025-47875 Malicious code in tikweb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 56e420aab6cf451bf10ab865d2950af02e45914f0a7618355f7ee8384ddcd858 This malicious package claims to interact with TikTok web features programmatically, but runs malicious obfuscated code upon import and via other...

Malicious code in regixtest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5bd4402c3382436a949c662f36088697ac7a3a0fd22e2c91fdf2102231e2392c Obfuscated code contains e.g. capabilities for downloading and executing code from a hardcoded location. It's also recognized as malware --- Category: MALICIOU...

MAL-2025-48896 Malicious code in regixtest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5bd4402c3382436a949c662f36088697ac7a3a0fd22e2c91fdf2102231e2392c Obfuscated code contains e.g. capabilities for downloading and executing code from a hardcoded location. It's also recognized as malware --- Category: MALICIOU...

MAL-2025-47868 Malicious code in bioql (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c883d47bd0d35130e4d53d9fc0f96211a30f4a62ad8a4490431ae9a1adaed8f The OpenSSF Package Analysis project identified 'bioql' @ 3.0.2 pypi as malicious. It is considered malicious because: - The package communicate...

Malicious code in bioql (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c883d47bd0d35130e4d53d9fc0f96211a30f4a62ad8a4490431ae9a1adaed8f The OpenSSF Package Analysis project identified 'bioql' @ 3.0.2 pypi as malicious. It is considered malicious because: - The package communicate...

Malicious code in propeller-solver-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a79fc2ce4f8dbef3a36ad1dcf36011f9d86435f347aa81ed601295d75e818b04 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-48908 Malicious code in tronlastpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45dfbc47ce737fe6b6913f21effbdaebc4a156b837c598449f0f96a6b15754a3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...