13347 matches found
Malicious code in threadfluent (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2a72da681aea57683d0d6b134f0263f126dfe205810fdcfa970c9920058fcf15 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
Malicious code in websynapse (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7323a05444284204de7701ff8b7a738bc155cb22356cf93fc1399dedad5afa46 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
MAL-2025-1007 Malicious code in websynapse (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7323a05444284204de7701ff8b7a738bc155cb22356cf93fc1399dedad5afa46 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
MAL-2025-933 Malicious code in httpfluent (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ad45caa6ad5e9c6f356193dc378e801a9fd3846f04443ad9d6c841b0b2e80c62 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
MAL-2025-994 Malicious code in threadfluent (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2a72da681aea57683d0d6b134f0263f126dfe205810fdcfa970c9920058fcf15 The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
Ultralytics Supply-Chain Attack
Last week, we saw a supply-chain attack against the Ultralytics AI library on GitHub. A quick summary: On December 4, a malicious version 8.3.41 of the popular AI library ultralytics --which has almost 60 million downloads--was published to the Python Package Index PyPI package repository. The...
Malicious code in python-bitget-wrapper (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 769187e87797e69e9ebfc00eb97274a91fea1c86b1472b4ef6436441f737c8b9 Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...
Malicious code in python-bitget-request (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bf787bcce66ad47046d93086a114a0f144b0f538b3d969fea6aea42b2312f58b Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...
[SECURITY] Fedora 40 Update: python3.9-3.9.21-1.fc40
Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...
[SECURITY] Fedora 41 Update: python3.9-3.9.21-1.fc41
Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...
openSUSE Security Advisory (SUSE-SU-2024:4285-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 40 : python3.11 (2024-5ea38dfb80)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5ea38dfb80 advisory. Python 3.11.11 security release. Security content in this release -------------------------------- - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to...
Medium: python3.11-pip
Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...
Fedora: Security Advisory (FEDORA-2024-5ea38dfb80)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-607a0047bc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
A number of releases of ultralytics contained malicious crypto miner software.
Ultralytics has identified a supply chain attackaffecting affecting multiple versions of the ultralytics package.The compromised versions contained unauthorized code thatdownloaded and executed cryptocurrency mining softwarewhen instantiating YOLO models.This code was injected into the PyPI relea...
Malicious code in urlcon (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11737 Malicious code in urlcon (PyPI)
--- -= Per source details. Do not edit below this line.=-...