Malicious code in ipfind-microtip (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eenomenallib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47761 Malicious code in eenomenallib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in discordext (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47757 Malicious code in discordext (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in btcli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47750 Malicious code in btcli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bitensor-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47748 Malicious code in bitensor-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: python-pip-24.2-3.fc41

pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

MAL-2025-47572 Malicious code in bloxypy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca1bb0aab09d6ef59ee1ff8485c8c2a6b565c1311246ed61d63c9757bd44ecdc Attempting to use the module starts obfuscated code containing an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10950 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10950 Source advisory: SNYK:PYTHON-MLLOGGER-13110026...

Malicious code in tronhexpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 87c2e19fbf3db867f8f5e0103196bcfa8e7b76e1b48431ade425fceaa6f7d86f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-48904 Malicious code in tronhexpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 87c2e19fbf3db867f8f5e0103196bcfa8e7b76e1b48431ade425fceaa6f7d86f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

PSF Warns of Fake PyPI Login Site Stealing User Credentials

The Python Software Foundation PSF warns developers of phishing emails leading to a fake PyPI login site designed to steal account credentials...

MAL-2025-48891 Malicious code in final-osint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4fd0b958714b427b2b2c39e7afd8134f71fae10467ce32d52cffeb74ec716c2 Importing the module starts an infostealer exfiltrating e.g. browser data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealer...

Malicious code in final-osint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4fd0b958714b427b2b2c39e7afd8134f71fae10467ce32d52cffeb74ec716c2 Importing the module starts an infostealer exfiltrating e.g. browser data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealer...

MAL-2025-47510 Malicious code in vielcord (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4663c6d9af6fa1feac7fd1719e4ff1a729bc8297eec7ce927a13804d475d2c8b During the execution, the package silently download and runs a JAR not related to the package job. At the time of analysis, the content was corrupted ---...

MAL-2025-48889 Malicious code in cugraph-service-server (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82f912f9abcdf4498f41f9d9a0b1667f0a81b7fdb1a7f4f850923223474647e6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in cugraph-service-server (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82f912f9abcdf4498f41f9d9a0b1667f0a81b7fdb1a7f4f850923223474647e6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...