PyPI - OSV

MAL-2026-17472

PyPI/anthropic-sdk

Malicious code in anthropic-sdk (PyPI) 13 hours ago

No fix available

MAL-2026-17471

PyPI/caoxiltts

Malicious code in caoxiltts (PyPI) yesterday

No fix available

MAL-2026-17469

PyPI/infrabench

Malicious code in infrabench (PyPI) yesterday

No fix available

MAL-2026-17470

PyPI/voxcpmruntime

Malicious code in voxcpmruntime (PyPI) yesterday

No fix available

MAL-2026-17468

PyPI/voxcpmintel

Malicious code in voxcpmintel (PyPI) yesterday

No fix available

MAL-2026-17465

PyPI/voxcpmeval

Malicious code in voxcpmeval (PyPI) yesterday

No fix available

MAL-2026-17466

PyPI/voxcpmkit

Malicious code in voxcpmkit (PyPI) yesterday

No fix available

MAL-2026-17467

PyPI/voxcpmui4

Malicious code in voxcpmui4 (PyPI) yesterday

No fix available

MAL-2026-17464

PyPI/voxcpmui3

Malicious code in voxcpmui3 (PyPI) yesterday

No fix available

MAL-2026-17462

PyPI/echogen

Malicious code in echogen (PyPI) 2 days ago

No fix available

MAL-2026-17463

PyPI/voxcpmtts3

Malicious code in voxcpmtts3 (PyPI) 2 days ago

No fix available

MAL-2026-17461

PyPI/voxel-tts

Malicious code in voxel-tts (PyPI) 2 days ago

No fix available

GHSA-h46j-26q3-rggf

PyPI/headroom-ai

Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH) 2 days ago

Fix available
Severity - 8.8 (High)

GHSA-v2f8-6655-7grj

PyPI/vibe-trading-ai

Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain 2 days ago

Fix available
Severity - 10.0 (Critical)

GHSA-5rmq-chc7-m22f

PyPI/vibe-trading-ai

Vibe-Trading file-read tools expose arbitrary server-readable files 2 days ago

Fix available
Severity - 7.5 (High)

GHSA-jqmf-mx4f-hfr6

PyPI/vibe-trading-ai

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF 2 days ago

Fix available
Severity - 10.0 (Critical)

Vulnerabilities