The genblaze-fal package on PyPI version 0.1.0 contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The pulumi-doppler package on PyPI contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The PyPI package 'fhqiouhq' version 0.1.0 contains malicious code that exfiltrates sensitive Telegram files to a remote location upon import. This package is identified as part of a typosquatting campaign targeting Telegram users, aiming to steal information.
The PyPI package 'ajfhiuqhfqgwerhuqnfqh' version 0.1.0 contains malicious code that exfiltrates sensitive Telegram files to a remote location during import. This package is identified as part of a typosquatting campaign targeting Telegram users with clear malicious intent to steal information.
The PyPI package 'reqnests' versions 0.1.0 and 0.1.1 contains malicious code that exfiltrates sensitive Telegram files to a remote location upon import. This is a typosquatting campaign with clear malicious intent targeting Telegram data.
The PyPI package 'reqnest' version 0.1.0 contains malicious code that exfiltrates sensitive Telegram files to a remote location upon import. This package is identified as a typosquatting attempt with clear malicious intent targeting Telegram data.
The hello-bat-fwi9 package on PyPI contains an obfuscated batch (.bat) file that delivers a Remote Access Trojan (RAT) using its own Python runtime and PTH files. The malicious code requires manual activation to execute. This package is part of a known malicious campaign identified as 2026-11-hello-bat-fwi9, continuing a previous campaign named 2026-11-filipt.
GeoNode versions prior to 5.0.3 contain a stored cross-site scripting (XSS) vulnerability in the documents metadata abstract field. This field does not sanitize input, allowing attackers to store arbitrary HTML and JavaScript that executes when the page is viewed. The vulnerability has a CVSS score of 6.3 (medium severity) and is fixed in version 5.0.3.
GeoNode versions prior to 5.0.3 contain an unrestricted file upload vulnerability that allows attackers to bypass upload validation using specially crafted requests. This flaw enables the storage and serving of malicious files, potentially leading to limited confidentiality, integrity, and availability impacts. The vulnerability is tracked as CVE-2026-46429 and has a medium severity rating with a CVSS score of 5.5. A fix is available in GeoNode version 5.0.3.
GeoNode versions prior to 5.1.0 are vulnerable to an OS command injection vulnerability via a crafted layer name in an uploaded vector file. This flaw allows an attacker with limited privileges to execute arbitrary operating system commands without user interaction. The vulnerability is addressed in GeoNode version 5.1.0.
The banks library versions prior to 2.4.3 contain a remote code execution vulnerability due to unsafe use of importlib.import_module and getattr on attacker-controlled import_path values in Tool JSON objects parsed from template bodies. This allows an attacker who can influence prompt content to execute arbitrary Python code in the hosting process. The vulnerability is distinct from a prior sandboxing fix and remains exploitable in version 2.4.2. A fix is available in version 2.4.3.
The 'mcp-teamviewer' package on PyPI (version 0.0.1) is identified as malicious. Installing or importing this package causes it to exfiltrate basic information such as the host's IP address and username. The package overrides the installation command to execute this malicious code and communicates with a domain linked to malicious activity. The package serves no legitimate purpose beyond this data exfiltration.
The 'teamviewer-mcp-server' package version 0.0.1 on PyPI has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged due to its communication with a domain linked to malicious activity. No CVSS score or detailed technical impact is provided.
The dbt-adapter package on PyPI contains malicious code that exfiltrates basic information such as the host's IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. The package serves no legitimate purpose beyond this data exfiltration.
The PyPI package 'rcp-ndcg' version 9999.0.0 has been identified as malicious by the OpenSSF Package Analysis project. It is flagged due to its communication with a domain associated with malicious activity. No further technical details or CVSS score are provided.
The strands-aidr package on PyPI contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The extera-runtime package on PyPI version 1.1.0 contains malicious code designed to exfiltrate sensitive Telegram files. The malicious functionality includes executing remote commands on the victim's machine, likely limited to a specific set of commands. The malicious code does not start automatically, indicating possible manual activation or trigger conditions. This package is part of a campaign identified as 2026-11-extera-plugin-runtime with clear malicious intent targeting Telegram data.
The msgpackrpc package on PyPI contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious code. It serves no legitimate purpose beyond this data exfiltration.
The extera-plugin-runtime package on PyPI contains malicious code designed to exfiltrate sensitive Telegram files. The malicious functionality includes executing remote commands on the victim's machine, though it does not start automatically. This package is part of a campaign with clear malicious intent targeting Telegram data.
The PyPI package 'ln9qw38745g' versions 0.1.0 and 0.1.1 contain embedded malicious code. This package overrides the installation process to execute malware, specifically a remote access trojan (RAT), during setup. It is linked to a prior package that switched from benign to malicious executables after a few releases.