Malicious code in pytensorlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 188201cba6b48f33920bc11fd719f4dcc6a78b6ca0e1c038f6a950027522cbe2 Importing the module downloads and starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-47803 Malicious code in titifel-pyip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db04496b1d3e7bb6d0e4f13530466504551bf243744fb5f0748195d38a11b0f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in titifel-pyip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db04496b1d3e7bb6d0e4f13530466504551bf243744fb5f0748195d38a11b0f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47783 Malicious code in libgomp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d390b58898a977fec39e6d1fe725cf5c2bcb09b2ecf4c2294a23d75a56dd71a6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in libgomp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d390b58898a977fec39e6d1fe725cf5c2bcb09b2ecf4c2294a23d75a56dd71a6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in iamenumerate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554 This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed no other changes. It is anyway...

MAL-2025-41688 Malicious code in iamenumerate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554 This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed no other changes. It is anyway...

MAL-2025-191767 Malicious code in jsonist (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4c74a199a696dbc18994242bc3c29e9a018ddda51fa2bbe224620d9ded6f1818 Calling a method starts downloading and starting an infostealer script --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in python-shuju-keshihua-xuexi-shouce (npm)

The package python-shuju-keshihua-xuexi-shouce was found to contain malicious code...

MAL-2025-30963 Malicious code in python-shuju-keshihua-xuexi-shouce (npm)

The package python-shuju-keshihua-xuexi-shouce was found to contain malicious code...

Malicious code in titifel-pypi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 246211906386c6795c3728d15bf42f5b9083257d1964d8dc21bcda833dd6363c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47804 Malicious code in titifel-pypi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 246211906386c6795c3728d15bf42f5b9083257d1964d8dc21bcda833dd6363c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in browser-run (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b45aebce3647704ac54d30a38e86493e0246f9ea44131394f84628656ef00ed Package uses the name as popular NPM package https://www.npmjs.com/package/browser-run, but the only thing it does is adding a hardcoded public SSH key and the...

MAL-2025-191696 Malicious code in browser-run (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b45aebce3647704ac54d30a38e86493e0246f9ea44131394f84628656ef00ed Package uses the name as popular NPM package https://www.npmjs.com/package/browser-run, but the only thing it does is adding a hardcoded public SSH key and the...

adjutantvoice (>=0.2.0, <=0.2.1), aeiou (>=0.0.12, <=0.0.21) +206 more potentially affected by CVE-2025-23294 via webdataset (>=0.1.40, <=1.0.2)

webdataset PYPI version =0.1.40, =0.2.0, =0.0.12, =1.4.23, =1.0.0, =0.0.1, =1.0.2.1, =1.0.0, =0.1.1a1, =0.1.0, =0.0.13, =1.0.3, =1.0.4 - audio-transc 0.1.0 - audio-xai 0.0.2.post3 - audio2dataset 1.0.1 and more Source cves: CVE-2025-23294 Source advisory: SNYK:PYTHON-WEBDATASET-12089391...

Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41768 Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

GHSA-V594-44HM-2J7P vulnerabilities

Vulnerabilities for packages: python...

GHSA-V594-44HM-2J7P vulnerabilities

Vulnerabilities for packages: python...

Malicious code in iamenumer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2281f18809744cd511d94170c1ce172994a633aa0b8b5bc9fa9b892629b5d674 Before creating the boto3 client, package exfiltrates user's credentials. Packages from the campaign are used as dependency in a GitHub project promising...