MAL-2025-6493 Malicious code in deeprce (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6485 Malicious code in crawl-requests (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cppython-core (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in common-test (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chalk-harness (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in celery-flower (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6472 Malicious code in bunzbar (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6468 Malicious code in broccoli-server (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6465 Malicious code in bluesadway (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bioformats (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bavard-ml-common (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aphisherman (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6435 Malicious code in aphisherman (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aphisher (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aistac-foundation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

After a successful phishing attack, new versions of `num2words` were published containing malware.

The num2words project was compromised via a phishing attackand two new versions were uploaded to PyPI containing malicious code.The affected versions have been removed from PyPI,and users are advised to remove the affected versions from their environments...

MAL-2025-191828 Malicious code in prof-tg-to-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e590e0ed82342410566d6866a770346dcbe14dc6f93bc6294d245148d6c28a51 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

MAL-2025-41789 Malicious code in trongridperm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eb2deee7747ccb12e0b2da45c212a0678fc8a3f02bf72b8aba4508ae70e3e26a Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in maxload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8 Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but th...

MAL-2025-41701 Malicious code in maxload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8 Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but th...