Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/07/21 5:22 p.m.•3 views

Malicious code in security-util-py (PyPI)

Source: ossf-package-analysis 2309de1524c064d7eba8b0c288762426955241d23e00eaaeca7766758ab9054e The OpenSSF Package Analysis project identified 'security-util-py' @ 0.0.6 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•34 views

PT-2025-36428

Name of the Vulnerable Software and Affected Versions: Datart versions up to 1.0.0-rc3 Description: A vulnerability exists in Datart due to the use of a hard-coded cryptographic key within the getTokensecret function located in the datart/security/src/main/java/datart/security/util/AESUtil.java...

3.1CVSS4.4AI score0.00272EPSS
SaveExploits0References8
osv_mal
osv_mal
•added 2023/05/15 12:11 p.m.•43 views

MAL-2023-10 Malicious code in security-util-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2309de1524c064d7eba8b0c288762426955241d23e00eaaeca7766758ab9054e The OpenSSF Package Analysis project identified 'security-util-py' @ 0.0.6 pypi as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
Rows per page
Query Builder