Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e88e848094db2d7414ceaf71a5a332701df9a17b145c137f0f5df76503847f90 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e1532a9577dc6edfd513dfbb1f189bc4cd08297e76c1f93bb2bf25ceaa210618 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

Malicious code in f2d5cfdc642c3d5 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea846c355b07f5a44c9e9add5eccd50fcf359359f6fdc49de3f7b696697b87c2 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3446 Malicious code in f2d5cfdc642c3d4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7996c4b5f5093de9bc2646228bce15683af10ede7957a934c5afa67346f1149d During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3433 Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e1532a9577dc6edfd513dfbb1f189bc4cd08297e76c1f93bb2bf25ceaa210618 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

Malicious code in bbllaacckkwwoollff6ad8f762 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4d90faddd66012c6f6fadc95f0a0e846b70504ed6ea47a65576ef5c4067a4985 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3432 Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e88e848094db2d7414ceaf71a5a332701df9a17b145c137f0f5df76503847f90 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3434 Malicious code in bbllaacckkwwoollff6ad8f753 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6d4b59c0779917e138aea3b1a424593ca84b58fa16a0cd75ba8a4c7523f92c87 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

Malicious code in codeoptimizer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7ae236bbeace8d7b056d4827059bc1f4b6314e57e75827ce5a980ac9dfb991c2 On importing the module, there is an automated start of a Telegram bot capable of exfiltrating passwords from browsers, executing arbitrary commands and so on...

Malicious code in yolov8mini (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a9222d20b84ed716d5bdf81f1da1d0f088fc7482894c8f25a5d1f757cc477ba9 On importing the module, there is an automated start of a Telegram bot capable of exfiltrating passwords from browsers, executing arbitrary commands and so on...

Malicious code in prmduc193 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 766c3df26ad3e62a1923e1c6879348aba96deafb8bf62a1555c589b57cd91fc0 Importing the package starts a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-prmduc193...

ado-sfttrainer (>=1.0.1, <=1.8.8), aim-mlflow (>=0.1.0, <=0.2.1) +26 more potentially affected by CVE-2025-0189 via aim (>=3.17.4, <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2025-0189 Source advisory: SNYK:PYTHON-AIM-9510938...

ado-sfttrainer (>=1.0.1, <=1.8.8), aim-mlflow (>=0.1.0, <=0.2.1) +26 more potentially affected by CVE-2025-0190 via aim (>=3.17.4, <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2025-0190 Source advisory: SNYK:PYTHON-AIM-9510937...

agentic-fleet (0.1.6), composio (0.1.1) +41 more potentially affected by CVE-2024-8955 via composio-core (>=0.3.13, <=0.7.21)

composio-core PYPI version =0.3.13, =0.7.1, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.7.1, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.7.15, =0.3.13, =0.7.20 and more Source cves: CVE-2024-8955 Source advisory: SNYK:PYTHON-COMPOSIOCORE-9637812...

cbtham-feast-az-provider (0.2.299), elemeno-ai-sdk (>=0.0.5, <=0.6.11) +27 more potentially affected by CVE-2024-11602 via feast (>=0.9.3, <=0.66.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =1.0.0.post202608270502, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.0rc3, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =0.4.0 and more Source cves: CVE-2024-11602 Source advisory: SNYK:PYTHON-FEAST-9510933...

airoboros (2.1.1), aphrodite-engine (>=0.3.0, <=0.5.1) +31 more potentially affected by CVE-2024-11603 via fschat (>=0.2.2, <=0.2.36)

fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =1.0.0, =1.1.4 - iflow-mcp-edenyavin-garakr-mcp 0.1.0 and more Source cves: CVE-2024-11603 Source advisory: SNYK:PYTHON-FSCHAT-9553181...

airoboros (2.1.1), aphrodite-engine (>=0.3.0, <=0.5.1) +31 more potentially affected by CVE-2024-10907 via fschat (>=0.2.2, <=0.2.36)

fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =1.0.0, =1.1.4 - iflow-mcp-edenyavin-garakr-mcp 0.1.0 and more Source cves: CVE-2024-10907 Source advisory: SNYK:PYTHON-FSCHAT-9553182...

ado-sfttrainer (>=1.0.1, <=1.8.8), aim-mlflow (>=0.1.0, <=0.2.1) +26 more potentially affected by CVE-2024-10110 via aim (>=3.17.4, <=4.0.3)

aim PYPI version =3.17.4, =1.0.1, =0.1.0, =0.1.0, =0.0.1, =4.46.1, =0.0.1, =0.0.3, =0.0.1, =1.1.5, =0.1.1, =0.22.0, =0.0.1, =0.0.1, =2.0.1, =2.0.7 and more Source cves: CVE-2024-10110 Source advisory: SNYK:PYTHON-AIM-9511139...

llama-index-llms-openllm (>=0.0.1, <=0.4.0) potentially affected by CVE-2024-8982 via openllm (>=0.4.44, <=0.6.30)

openllm PYPI version =0.4.44, =0.0.1, =0.4.0 Source cves: CVE-2024-8982 Source advisory: SNYK:PYTHON-OPENLLM-9599694...

编号撤回

PyTorch is a Python package in the PyTorch open source. This CVE number has been withdrawn...