The PyPI package tessivatts version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain direct malicious payloads or harmful installer-side behavior, it is designed to download and execute remote malicious scripts. This campaign is identified as having clear malicious intent, including potential infostealer activity.
The PyPI package 'vellutts' version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although this specific package version does not show direct evidence of exfiltration or remote code execution within its files, it is designed to download and run remote malicious scripts. This activity is indicative of a coordinated effort to deploy deceptive loaders for executing malicious payloads.
The grommatts package on PyPI version 0.1.0 is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. Although the package itself does not contain direct malicious payloads or install-time network activity, it facilitates downloading and executing remote malicious scripts. This behavior is indicative of a coordinated effort to deploy deceptive loaders for malicious code execution.
The zennittts package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that download and execute remote malicious scripts. These packages do not contain the payload themselves but serve as deceptive loaders to run malicious code from external URLs.
The PyPI package 'aurenatts' version 0.1.0 is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although this specific package version does not show evidence of direct exfiltration, remote code execution at install time, or other common malicious behaviors, it functions as a loader that downloads and executes remote malicious scripts. This activity indicates a coordinated effort to distribute malicious code through deceptive means.
The phonoviatts 0.1.0 package on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. While the package itself does not show installer-side harm such as network activity or credential theft during installation, it is designed to download and execute remote malicious scripts. This behavior indicates a coordinated effort to distribute malicious code through deceptive loader packages.
The PyPI package 'voxilaratts' version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain the malicious payload or exhibit installer-targeting behavior, it is designed to download and run remote malicious scripts. This activity is part of a coordinated campaign with clear malicious intent.
The brummatts 0.1.0 PyPI package is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although the package itself does not contain direct credential access, outbound network I/O to attacker-controlled destinations, or install-time fetch-and-execute behavior, it serves as a mechanism to load and execute malicious scripts remotely. This campaign is identified as having clearly malicious intent, such as infostealers.
The PyPI package melcuratts version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not execute attacker-controlled code during installation or import, nor does it harvest credentials or communicate with attacker servers directly, it is designed to download and run remote malicious scripts. This behavior indicates a coordinated effort to distribute malicious payloads through deceptive loader packages.
The PyPI package quillonatts version 0.1.0 is part of a malicious campaign involving loader packages designed to execute code from remote URLs. While the package itself does not contain direct malicious payloads or exhibit typical supply-chain attack behaviors such as credential harvesting or persistence mechanisms, it facilitates downloading and executing remote malicious scripts. This coordinated campaign aims to provide multiple deceptive methods to load malicious code.
The shellgrip 0.1.0 package on PyPI is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. Although the package itself does not show installer-side harm or direct malicious payloads, it facilitates the downloading and execution of remote malicious scripts. This behavior is indicative of a coordinated effort to distribute malicious code through deceptive means.
The batchspar 0.1.0 package on PyPI is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. While the package itself does not contain a direct malicious payload or exhibit harmful behaviors during installation or import, it is intended to facilitate the execution of remote malicious scripts. This activity is associated with a coordinated campaign named '2026-10-voice-synthesis-profiles' that aims to deploy deceptive loaders for malicious code execution.
The PyPI package 'crenelatts' version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain a direct malicious payload or exhibit harmful behaviors such as credential theft or backdoors, it is designed to download and execute remote malicious scripts. This indicates a coordinated effort to distribute malicious code through deceptive means.
Pillow versions from 11.2.1 up to but not including 13.0.0 have a vulnerability in the Arrow export functionality where the code incorrectly assumes image rows are tightly contiguous. This causes the exported Arrow buffer to potentially include uninitialized padding, memory preceding the first row, or stale heap data from previously freed images. As a result, applications that use alignment configuration and export images to Arrow may inadvertently disclose pixel data or other process memory from one user to another. The issue is resolved in Pillow version 13.0.0.
The libseal package on PyPI, versions 1.1.0 through 1.1.3, is involved in a malicious campaign where it provides decryption algorithms for an encrypted payload delivered by another package, iterquarry. Earlier versions contained an embedded key and communicated with a Discord bot, but recent versions removed the embedded key, leaving the payload unknown. Static analysis found no installer-side harmful behaviors in libseal itself, but the campaign is classified as malicious due to obfuscation and hidden malicious code within dependencies.
The iterquarry Python package (versions 2.1.1 through 2.2.1) is part of a malicious campaign involving obfuscated code execution. It acts as a thin wrapper over a sibling package, libseal, which contains encrypted payloads decrypted and executed at runtime using hardcoded or embedded keys. Earlier versions included a payload that contacted a Discord bot, indicating malicious intent. The package itself does not provide legitimate iterator functionality but instead executes arbitrary encrypted code from its dependency.
Pillow, a Python imaging library, has a vulnerability in versions prior to 13.0.0 on Windows where the WMF or EMF image plugin improperly handles 32-bit metafile dimensions. This leads to a heap buffer over-read or crash when processing crafted metafiles. The issue is fixed in version 13.0.0.
A vulnerability in the Pillow Python imaging library versions from 11.0.0 up to but not including 13.0.0 causes excessive CPU usage when processing certain EXIF data. The Exif.load() function repeatedly slices EXIF data containing repeated six-byte Exif headers, leading to quadratic CPU work. This can be triggered via common image operations such as Image.getexif(), Image._getexif(), and ImageOps.exif_transpose(). The issue is fixed in version 13.0.0.
Pillow versions prior to 13.0.0 contain a vulnerability in the TarIO initializer where a negative octal member size causes a backward seek to the same 512-byte header. If the requested member name does not match, the parser repeatedly reads the header, consuming a full CPU core and causing the process to hang indefinitely. This issue affects only applications that directly use PIL.TarIO.TarIO rather than the standard Image.open() method. The vulnerability is fixed in version 13.0.0.
Pillow versions prior to 13.0.0 contain a vulnerability in the PILfont text-width accumulation code where negative glyph advances are not properly checked, leading to a signed integer overflow. This can cause logic errors or excessive resource consumption in applications using text size calculations. The issue is fixed in version 13.0.0.