MAL-2025-6551 Malicious code in murkh1111 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 906d5f09d6b21967d1f368837e8208faaccf4d609537ad596c58dd76a5c93a8c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11556 Malicious code in check-codeowners (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 946e4f02e3bc9fafb3561655eaaf71128a7a37469e09460b0b9f3f204e850185 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11659 Malicious code in platform-harness-ecr-configmap (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7812939dfec5496e941d5bd252e8f536d2b2e38984c285fd5881230dd705d928 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4222 Malicious code in kms-tls-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e211b150f40985e98e9911c5d367f46e7b32351137aece84e0ffc6cd0ab7ef31 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11747 Malicious code in vsc-accountpage-clients (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4a944a63a10d8227a08f1e886092063f618336d89a3dfe4600908830fa199b77 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-2992 Malicious code in python-dateutil-malicious (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e746200736f98b51154e3cfbafa826ee92b8badb2005dac0e8fb4765cc3cbc57 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4256 Malicious code in vfsrce18 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e469759fd14d2b1207e5da1f724c19e6dc6b2896feaf658ad78c4ad33e3748de Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4225 Malicious code in merbe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc6162eed3f18cfb9c42521df101775d64a0a1baa3e2b7de1254c19d48f27a27 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4213 Malicious code in ctftestsowwy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d6e53c512e63c328ecdc02187c5fe11c5b379e6bf451f936f769219c1787d146 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6512 Malicious code in google-appengine-ext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 142a8fbc789954291f2b01aab5ac1d139eaaf4f9f490fd6dcf30da438f7d8e51 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4223 Malicious code in mcp-xyz (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4d411df043997ef0429e5915d45bcddf0e361d525c4f471e32c861e9a3553fd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6499 Malicious code in elbloadmonitor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 88c42654181376acf7c6b7f01d62ff8c47962c3405e54d1924caa9de70e01548 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11682 Malicious code in python-drgn-commons-pandas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ffa5a1e2c14a2a4190e5f837dfdd0ec9ad3f5579b22ec7c3717748acd76e46c0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6526 Malicious code in is-number-object (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 60c891b7eb9d0f5a8ca04cb59f7b91bac36fbcc7df40fcf44b9a46f8c969daf3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-5132 Malicious code in saml-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b054dba9521b1260174fa01f3f7ba51d88bd51e53c481675ed967271304a63f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-964 Malicious code in qassabi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3ed5e109142f6f718ce92b9e9e8e549ef2182b601cad597a729aae045d182a46 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4226 Malicious code in merpe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 faca94094d9aee6f6c1cb44ef0429d261258fa7b12ee68d92a93c80054638561 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6582 Malicious code in sensadway (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bd6ee914063e1d35067f3d6d13bc64aabf1bf7e7e1630f61047b55302f440e67 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2024-41375

ICEcoder 8.1 is vulnerable to Cross Site Scripting XSS via lib/terminal-xhr.php...

GHSA-64JH-CJWC-W8Q6 snapd failed to properly check the file type when extracting a snap

In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files such as pipes or sockets etc. Various file entries within the snap squashfs image such as icons...