Malicious code in celery-flower (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6472 Malicious code in bunzbar (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6468 Malicious code in broccoli-server (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6465 Malicious code in bluesadway (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bioformats (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bavard-ml-common (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aphisherman (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6435 Malicious code in aphisherman (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aphisher (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aistac-foundation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

After a successful phishing attack, new versions of `num2words` were published containing malware.

The num2words project was compromised via a phishing attackand two new versions were uploaded to PyPI containing malicious code.The affected versions have been removed from PyPI,and users are advised to remove the affected versions from their environments...

Malicious code in prof-tg-to-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e590e0ed82342410566d6866a770346dcbe14dc6f93bc6294d245148d6c28a51 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

MAL-2025-191828 Malicious code in prof-tg-to-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e590e0ed82342410566d6866a770346dcbe14dc6f93bc6294d245148d6c28a51 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

Malicious code in prof-tg-go-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e68d60babccd176fc8f6620e7b711731ff8d6b200d2141b318f1f09482c5a903 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

MAL-2025-191826 Malicious code in prof-tg-gjho-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4eda95abcb7e3957c90ff671377cce017006e93aa74b673b13ef8588c9615d14 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

MAL-2025-191823 Malicious code in prof-tg-dggrto-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a9dba23d808b6cdccaa1ceb5d393dd3b7774d71a2fdcde19ef7e1ea927a386ce Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

MAL-2025-41789 Malicious code in trongridperm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eb2deee7747ccb12e0b2da45c212a0678fc8a3f02bf72b8aba4508ae70e3e26a Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in trongridperm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eb2deee7747ccb12e0b2da45c212a0678fc8a3f02bf72b8aba4508ae70e3e26a Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in maxload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8 Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but th...

MAL-2025-41701 Malicious code in maxload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8 Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but th...