cloudmesh-client (>=4.5.0, <=4.7.3), python-telegram-bot (5.3.1) +1 more potentially affected by CVE-2025-50181 via urllib3 (1.20.0)

urllib3 PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 - python-telegram-bot 5.3.1 - steem 0.18.4 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

MAL-2025-192365 Malicious code in python-tg-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5397ab6595b8237172e9a49952d092803e03526e3dda8277c64dc4d26ae45ff2 During importing, a dependency with infostealer is loaded and package attempts to exfiltrate credentials. --- Category: MALICIOUS - The campaign has clearly...

EUVD-2025-201590

Malicious code in python-tg-bot PyPI...

cloudmesh-client (>=4.5.0, <=4.7.3), python-telegram-bot (5.3.1) +1 more potentially affected by CVE-2025-50181 via urllib3 (1.20.0)

urllib3 PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - cloudmesh-client =4.5.0, =4.7.3 - python-telegram-bot 5.3.1 - steem 0.18.4 Source cves: CVE-2025-50181 Source advisory: OSV:GHSA-PQ67-6M6Q-MJ2V...