Malicious code in 48484efej8id (PyPI)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2024:14565-1 python310-Django4-4.2.17-1.1 on GA media

These are all security issues fixed in the python310-Django4-4.2.17-1.1 package on the GA media of openSUSE Tumbleweed...

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

In yet another software supply chain attack, it has come to light that two versions of a popular Python artificial intelligence AI library named ultralytics were compromised to deliver a cryptocurrency miner. The versions, 8.3.41 and 8.3.42, have since been removed from the Python Package Index...

[SECURITY] Fedora 41 Update: uv-0.5.5-2.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 40 Update: uv-0.5.5-2.fc40

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

openSUSE Security Advisory (SUSE-SU-2024:4194-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-2964 Malicious code in flamepro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53c4ea20a42b8ba4c81e1625a540dbe1eff5fde676d280fb1b1a53d04b7ef069 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in intgraphx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4fb1e216d0815e75bd49620f6176c757576a58b8e4669df0ff803d7a84aad2ba Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-931 Malicious code in graphicsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f85a722af04dc8f110fe530c6c3de3345ac2cf99b4e315d82cbbf0039c54660 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in flamepro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53c4ea20a42b8ba4c81e1625a540dbe1eff5fde676d280fb1b1a53d04b7ef069 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-936 Malicious code in intgraphx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4fb1e216d0815e75bd49620f6176c757576a58b8e4669df0ff803d7a84aad2ba Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in graphicsx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f85a722af04dc8f110fe530c6c3de3345ac2cf99b4e315d82cbbf0039c54660 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in dbsxrchpro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7e904380115b3ea3cfb5766a5e527bb71775c65af3706c2d5392ef3e60d17c5 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-2955 Malicious code in dbsxrchpro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7e904380115b3ea3cfb5766a5e527bb71775c65af3706c2d5392ef3e60d17c5 Installing the package starts downloading and installing an Infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

“aiocpa” Python Package Exposed as Cryptocurrency Infostealer

SUMMARY The machine learning-based threat-hunting system of leading threat intelligence and cybersecurity firm ReversingLabs RL recently detected malicious…...

SUSE: Security Advisory (SUSE-SU-2024:4165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 8 : python3:3.6.8 (ALSA-2024:10779)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10779 advisory. python: Virtual environment venv activation scripts don't quote paths CVE-2024-9287 python: Improper validation of IPv6 and IPvFuture addresses...

openSUSE Security Advisory (SUSE-SU-2024:4137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-P57H-3CMC-XPJQ Python package "zhmcclient" stores passwords in clear text in its HMC and API logs

Impact The Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases: The 'boot-ftp-password' and 'ssc-master-pw' properties when creating or updating a partition in DPM mode, in the zhmcclient API and HMC logs The 'ssc-master-pw' a...

MAL-2024-12308 Malicious code in my-main-manager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac004ff76ebc011d60ae86c56b7f57ddb6ac0d24ff0ddd9ad777319775f79282 While the package appears to be a manager for Windows service, the linked executable is an infostealer with capabilities like cookie stealing ang keylogger. Th...