5dee (=0.1.0), a5py (=0.1.1) +446 more potentially affected by CVE-2025-29480 via gdal (>=3.0.1 <=3.13.0)

gdal PYPI version =3.0.1, =0.0.1, =0.9.0, =0.6.1, =0.1.2, =1.0.1, =1.0.0, =1.9.3, =0.2.0, =1.6.2, =0.0.1, =0.0.5 - astrovision =0.2.0 and more Source cves: CVE-2025-29480 Source advisory: OSV:PYSEC-2025-117...

Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

Cybersecurity researchers have uncovered malicious libraries in the Python Package Index PyPI repository that are designed to steal sensitive information and test stolen credit card data. Two of the packages, bitcoinlibdbfix and bitcoinlib-dev, masquerade as fixes for recent issues detected in a...

3d-rcnet (>=0.1.0 <=0.2.3), 4996 (>=0.1.0 <=0.1.1) +1368 more potentially affected by CVE-2025-3121 via torch (>=1.0.0 <=1.13.1)

torch PYPI version =1.0.0, =0.1.0, =0.1.0, =0.2.4, =0.0.1b1, =1.0.32, =0.0.3, =2.1.17, =0.0.0.dev1, =0.2.3, =0.4.0, =0.6.3 and more Source cves: CVE-2025-3121 Source advisory: OSV:PYSEC-2025-196...

01os (>=0.0.1 <=0.0.13), aeiva (>=0.8.1 <=0.8.2.6) +193 more potentially affected by unknown CVE via litellm (>=1.0.0 <=1.63.7)

litellm PYPI version =1.0.0, =0.0.1, =0.8.1, =0.14.1a0, =0.1.0, =0.0.5, =1.1.2, =0.2.0, =0.1.1, =0.5.0, =0.1.0, =1.0.3, =0.2.10, =0.29.0, =0.59.1, =0.1.5, =1.1.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-9667338...

api-python-bet-project (>=0.1.9 <=0.1.22), argosml (>=0.0.1 <=0.1.3) +60 more potentially affected by CVE-2025-1474 via mlflow (>=2.0.0rc0 <=2.19.0)

mlflow PYPI version =2.0.0rc0, =0.1.9, =0.0.1, =0.1.3, =1.2.0, =0.8.0, =0.0.10, =0.1.2370984012, =0.0.41, =1.6.0, =0.14.0, =0.14.0, =0.14.0, =0.14.2 and more Source cves: CVE-2025-1474 Source advisory: SNYK:PYTHON-MLFLOW-9486737...

ado-sfttrainer (>=1.0.1 <=1.8.0), aim-mlflow (>=0.1.0 <=0.2.1) +27 more potentially affected by CVE-2025-0189 via aim (>=3.17.4 <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2025-0189 Source advisory: SNYK:PYTHON-AIM-9510938...

ado-sfttrainer (>=1.0.1 <=1.8.0), aim-mlflow (>=0.1.0 <=0.2.1) +27 more potentially affected by CVE-2025-0190 via aim (>=3.17.4 <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2025-0190 Source advisory: SNYK:PYTHON-AIM-9510937...

composio-autogen (>=0.3.13 <=0.4.2), composio-camel (>=0.3.17 <=0.4.2) +11 more potentially affected by CVE-2024-8952 via composio-core (>=0.3.13 <=0.4.2)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.4.2 Source cves: CVE-2024-8952 Source advisory: OSV:GHSA-QVG9-VP87-H3HR...

adclaw (>=1.0.0 <=1.0.4), agentjet (=0.0.1) +24 more potentially affected by CVE-2024-8502 via agentscope (>=0.1.0 <=1.0.7)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =1.0.0.post2, =0.1.0, =0.1.0, =0.1.0.post1, =0.2.0, =0.4.0, =0.1.6, =0.1.84 and more Source cves: CVE-2024-8502 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511410...

amlr (>=0.3.6 <=0.4.1), arsa-ml (>=0.1.0 <=0.1.13) +29 more potentially affected by CVE-2024-7768 via h2o (>=3.18.0.8 <=3.46.0.7)

h2o PYPI version =3.18.0.8, =0.3.6, =0.1.0, =0.0.92, =1.0.81, =2019.9.10.14.39.5, =1.0.1, =0.1.20, =0.1.0, =0.1.2, =0.3.2, =0.3.0, =1.0.1.1.4, =0.4.0.dev3, =0.1.0, =3.0.1, =5.4.1 and more Source cves: CVE-2024-7768 Source advisory: OSV:GHSA-P2VC-M5FV-9W9M...

api-python-bet-project (>=0.1.9 <=0.1.22), argosml (>=0.0.1 <=0.1.3) +73 more potentially affected by CVE-2024-6838 via mlflow (>=2.0.0rc0 <=2.20.4)

mlflow PYPI version =2.0.0rc0, =0.1.9, =0.0.1, =1.0.4, =0.1.3, =1.2.0, =0.1.0, =0.0.10, =0.8.0, =0.0.10, =0.1.2370984012, =0.0.41, =1.6.0, =1.8.2 and more Source cves: CVE-2024-6838 Source advisory: SNYK:PYTHON-MLFLOW-9510934...

ado-sfttrainer (>=1.0.1 <=1.8.0), aim-mlflow (>=0.1.0 <=0.2.1) +27 more potentially affected by CVE-2024-6851 via aim (>=3.17.4 <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2024-6851 Source advisory: SNYK:PYTHON-AIM-9511132...

agentverse (=0.1.8.1), airoboros (=2.1.1) +35 more potentially affected by CVE-2024-11603 via fschat (>=0.2.2 <=0.2.36)

fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =0.1.1, =0.1.8 and more Source cves: CVE-2024-11603 Source advisory: SNYK:PYTHON-FSCHAT-9553181...

agentverse (=0.1.8.1), airoboros (=2.1.1) +35 more potentially affected by CVE-2024-10907 via fschat (>=0.2.2 <=0.2.36)

fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =0.1.1, =0.1.8 and more Source cves: CVE-2024-10907 Source advisory: SNYK:PYTHON-FSCHAT-9553182...

3d-rcnet (>=0.2.2 <=0.2.3), aa-prepflow (>=0.1.0 <=0.1.1) +1036 more potentially affected by CVE-2024-10569 via gradio (>=4.0.0b15 <=6.9.0)

gradio PYPI version =4.0.0b15, =0.2.2, =0.1.0, =0.0.3, =0.1.5, =0.8.2.4, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =0.1.4, =0.1.11 - agents4sky =0.0.1 and more Source cves: CVE-2024-10569 Source advisory: SNYK:PYTHON-GRADIO-9487019...

act-workflow (>=4.8.2 <=4.8.399), agent-builder (=0.0.1) +14 more potentially affected by CVE-2024-10940 via langchain-core (>=0.3.0.dev4 <=0.3.14)

langchain-core PYPI version =0.3.0.dev4, =4.8.2, =0.1.6, =0.3.0, =0.1.14rc1, =0.1.8rc1, =0.3.0.dev1, =0.1.0, =4.2.1, =0.1.0, =0.4.16, =0.4.15, =0.5.8 and more Source cves: CVE-2024-10940 Source advisory: SNYK:PYTHON-LANGCHAINCORE-9486546...

adclaw (>=1.0.0 <=1.0.4), agentjet (=0.0.1) +24 more potentially affected by CVE-2024-8489 via agentscope (>=0.1.0 <=1.0.7)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =1.0.0.post2, =0.1.0, =0.1.0, =0.1.0.post1, =0.2.0, =0.4.0, =0.1.6, =0.1.84 and more Source cves: CVE-2024-8489 Source advisory: SNYK:PYTHON-AGENTSCOPE-9599695...

adclaw (>=1.0.0 <=1.0.4), agentloop-sdk (>=0.3.0 <=0.4.0) +23 more potentially affected by CVE-2024-8438 via agentscope (>=1.0.10 <=1.0.19.post1)

agentscope PYPI version =1.0.10, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =1.0.0.post2, =0.1.0, =0.1.0, =0.1.0.post1, =0.2.0, =0.4.0, =0.1.6, =0.1.0, =0.1.2 and more Source cves: CVE-2024-8438 Source advisory: OSV:PYSEC-2025-80...

adclaw (>=1.0.0 <=1.0.4), agentloop-sdk (>=0.3.0 <=0.4.0) +23 more potentially affected by CVE-2024-8487 via agentscope (>=1.0.10 <=1.0.19.post1)

agentscope PYPI version =1.0.10, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =1.0.0.post2, =0.1.0, =0.1.0, =0.1.0.post1, =0.2.0, =0.4.0, =0.1.6, =0.1.0, =0.1.2 and more Source cves: CVE-2024-8487 Source advisory: OSV:PYSEC-2025-81...

acquantum-qiskit (>=0.0.1 <=0.0.3), aer-plugin (>=0.0.1 <=0.0.2) +161 more potentially affected by CVE-2025-2000 via qiskit (>=0.18.3 <=1.4.0)

qiskit PYPI version =0.18.3, =0.0.1, =0.0.1, =0.1.0, =0.1.4, =0.1.4, =0.0.1, =0.6.0, =0.0.0, =2.0.0, =0.0.3, =0.0.2, =0.1.0, =0.1.0.3 and more Source cves: CVE-2025-2000 Source advisory: SNYK:PYTHON-QISKIT-9459043...