Malicious code in python-socket-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 93a8d30e631680bace9b05db1ac189cbcc472895fcfb1db40f4df52f301a6599 Importing the package starts a script that takes commands from remote server and executes locally --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in axonify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

Malicious code in logax (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e129e6d6d38e21a039bd2190e3138f1381ad386e45a49521621a8b8ad61f7678 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

MAL-2025-3450 Malicious code in logax (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e129e6d6d38e21a039bd2190e3138f1381ad386e45a49521621a8b8ad61f7678 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

MAL-2025-191688 Malicious code in axonify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

OPENSUSE-SU-2025:14908-1 python311-Django4-4.2.20-1.1 on GA media

These are all security issues fixed in the python311-Django4-4.2.20-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in httpx-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d26dbf9fa1035b8b1e189f67123ee22f506cd21c08e17c282176a716af9da033 Importing the module starts downloading and executing first a script, and then a widely identified malware Packages are used as dependencies in a GitHub projec...

Malicious code in xcepthttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 98504a58d8dccbb3ea09cc521e14c9a64707763302db04111ad32eeba8616925 Importing the module starts downloading and executing first a script, and then a widely identified malware Packages are used as dependencies in a GitHub projec...

Malicious code in asynchttpx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5b8f233eae76de4578a7b30c6564338d644a7dfa1f59682337792de5ad13668f Importing the module starts downloading and executing first a script, and then a widely identified malware Packages are used as dependencies in a GitHub projec...

python3.12-urllib3 security update

An update is available for python3.12-urllib3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list urllib3 is a powerful, user-friendly HTTP client for Python. urlli...

openSUSE Security Advisory (SUSE-SU-2025:0861-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: python3.6-3.6.15-43.fc42

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

RHEL 8 : python-jinja2 (RHSA-2025:2612)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:2612 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

OPENSUSE-SU-2025:14885-1 python313-3.13.2-3.1 on GA media

These are all security issues fixed in the python313-3.13.2-3.1 package on the GA media of openSUSE Tumbleweed...

python311-3.11.11-4.1 on GA media (moderate)

python311-3.11.11-4.1 on GA media Announcement ID: openSUSE-SU-2025:14872-1 Rating: moderate Cross-References: CVE-2025-1795 CVSS scores: CVE-2025-1795 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2025-1795 SUSE : 2.3...

OPENSUSE-SU-2025:14873-1 python312-3.12.9-2.1 on GA media

These are all security issues fixed in the python312-3.12.9-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14872-1 python311-3.11.11-4.1 on GA media

These are all security issues fixed in the python311-3.11.11-4.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in ccxt-mexc-futures (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f2eb5eb75679b536c430ad6d5440e63fbe1d1cd391ab1abf2a411dae3a768ed8 There is a hidden code that overwrites the default method and downloads remote data, which contains the dictionary pretending to be the right value, and a hidd...

MAL-2025-3019 Malicious code in wiki-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9d4143f13c89e66e8f5b2c0905a57d6d25f6d02d46b62aef3e58d4b1f2dda697 Setup.py attempts to exfiltrate information about the system and span a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in wiki-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9d4143f13c89e66e8f5b2c0905a57d6d25f6d02d46b62aef3e58d4b1f2dda697 Setup.py attempts to exfiltrate information about the system and span a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like...