Malicious code in esqcved (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a7155355697f245f3cece4f295ab464f0648a3f03be862083e531aeb7295c142 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-gamecv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b4b87457e1c7e80df3fcf0c2c06d627fb7dd3442795fba3a652aa4e45f20d0aa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in intelpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ab16fb631ead434b02d95a8a61583a10721de7673baad5bbff915f046b8ba627 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in lgtbstr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8310dfb73003443210673d27ba3bdca9374cf87e43b93cd847c07ca584bdaa2d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in proofcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b726841057aceeb3d409d863ffdaa9ced18ee50b9051df1f4e81159493f17928 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in adcpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aa5dc890da9fcf136c6f31ef6d26bffd12f4dc4e8d57073af42cc29dcadc5dc1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in maatplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5fd54b8946d61b481aceba9e137754cab3a42427be859691965ca12ddb9083b6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

PYSEC-2022-43023

The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-1431

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint allowing the attacker to...