[SECURITY] Fedora 42 Update: uv-0.6.14-3.fc42

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

CVE-2023-43804 affecting package python3 for versions less than 3.9.19-13

CVE-2023-43804 affecting package python3 for versions less than 3.9.19-13. A patched version of the package is available...

python311-aiohttp-3.11.16-1.1 on GA media (moderate)

python311-aiohttp-3.11.16-1.1 on GA media Announcement ID: openSUSE-SU-2025:14998-1 Rating: moderate Cross-References: CVE-2024-12254 CVSS scores: CVE-2024-12254 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-12254 SUSE : 8.7...

Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

Cybersecurity researchers have disclosed a malicious package uploaded to the Python Package Index PyPI repository that's designed to reroute trading orders placed on the MEXC cryptocurrency exchange to a malicious server and steal tokens. The package, ccxt-mexc-futures, purports to be an extensio...

MAL-2025-3443 Malicious code in colorona (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 27014d3a14c4b1df61609aa62f901b3f8cb01f4898bb729d52d6cd08928555be If the method "SetTerminalColor", imitating colorama package, is called, then the code exfiltrated browser, discord and Minecraft passwords/tokens. --- Categor...

Malicious code in colorona (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 27014d3a14c4b1df61609aa62f901b3f8cb01f4898bb729d52d6cd08928555be If the method "SetTerminalColor", imitating colorama package, is called, then the code exfiltrated browser, discord and Minecraft passwords/tokens. --- Categor...

MAL-2025-3441 Malicious code in colorina (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5280fa2df728b98c1eda6d86d4b0fc233d4bd0d58ac17160427e16f1bb154081 Using the "color" function will exfiltrated data like discord tokens, browser-saved passwords and Minecraft access tokens --- Category: MALICIOUS - The campaig...

Malicious code in colorina (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5280fa2df728b98c1eda6d86d4b0fc233d4bd0d58ac17160427e16f1bb154081 Using the "color" function will exfiltrated data like discord tokens, browser-saved passwords and Minecraft access tokens --- Category: MALICIOUS - The campaig...

Slackware: Security Advisory (SSA:2025-099-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in hyper-request (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6431cc277fd1d8f82ec5160b5943d5ee9ec08ca1a5c5ff9b1b45d67c233b1d2 The only functionality is to exfiltrated Roblox cookies. However, the current version does not contain the webhook url yet see reqhandler.py --- Category:...

MAL-2025-191763 Malicious code in hyper-request (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6431cc277fd1d8f82ec5160b5943d5ee9ec08ca1a5c5ff9b1b45d67c233b1d2 The only functionality is to exfiltrated Roblox cookies. However, the current version does not contain the webhook url yet see reqhandler.py --- Category:...

MAL-2025-191915 Malicious code in ultrafasttelethon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 73a960b0cd2d21f8bde61f22f956a4c2a02ccddd9e1277eef23d3d8e0406cba4 Clone of Telethon package that exfiltrates credentials. See client/telegrambaseclient.py L608-626 exfiltration function and client/auth.py L163 usage. ---...

Malicious code in colorinsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea605189c0cea53175b8c70e9163dcc15333629a93b9ea991d154486c931950c Using the color function triggers attempts to exfiltrate browsers data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3442 Malicious code in colorinsa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea605189c0cea53175b8c70e9163dcc15333629a93b9ea991d154486c931950c Using the color function triggers attempts to exfiltrate browsers data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

OPENSUSE-SU-2025:14965-1 python311-ecdsa-0.19.1-1.1 on GA media

These are all security issues fixed in the python311-ecdsa-0.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-191731 Malicious code in flask-auth-system (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 debc87eb7af33e5146831c7e1b8ff69ccdebe2c9bbf353216c719b10ebe8431c On importing the module, the code attempts to span a reverse shell. In the current version, the remote domain does not exist --- Category: MALICIOUS - The...

Malicious code in flask-auth-sys (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a241889bfae20aee5395660063d13f337aa9733c14b02bf2edb004d6d36e1d41 On importing the module, the code attempts to span a reverse shell. In the current version, the remote domain does not exist --- Category: MALICIOUS - The...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +27998 more potentially affected by CVE-2025-3001 via torch (>=1.0.0, <=2.13.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-3001 Source advisory: SNYK:PYTHON-TORCH-10337828...

Malicious code in runningwifi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c510d8dbbc3448272c337960c786b9b9731fe97773a4bfd48844527c7e6bed6 Running the module will exfiltrate files from the current directory --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in runwifi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83046dbbe0f24ed7ffb9087d78c161e332436c45f2f3f4433606ebb9fd9cc52d Running the module will exfiltrate files from the current directory --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...