탐지

탐지된 패키지

분석 파이프라인이 auto-published로 분류한 패키지 전체. 주간 다운로드 기준으로 정렬하면 영향력이 큰 케이스부터 먼저 보입니다.

전체 탐지

1,272

최근 7일 0건

다운로드 최대

1.1M/wk

disposable-email-domains

정렬

/에코시스템

전체 npm pypi gh-actions vscode huggingface

29건·2026-06-07 인덱싱됨

AUTO-PUBLISHED/pypi/2026-06-06
disposable-email-domains2 versions·0.0.196→0.0.197
A set of disposable email domains
steals →Chromium logins
reads-chromium-credswebhook-binarchive-then-uploadclipboard-access
weekly
1.1M
/wk
h-score
20
patterns
AUTO-PUBLISHED/pypi/2026-04-08/MAL-2026-4174
durabletask@1.4.0
A Durable Task Client SDK for Python
steals →Chromium logins
reads-chromium-credspy-pip-install-runtimearchive-then-upload
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
103K
/wk
llm verdict
benign 0.85
AUTO-PUBLISHED/pypi/2026-06-04
sealights-python-agent@2.10.10
by Tricentis Sealights
Tricentis Sealights Python Agent - Quality Intelligence and Code Coverage
steals →Chromium logins→ sends tohttps://packaging.python.org/en/latest/distributing.html
py-pip-install-runtimereads-env-varspy-urllib-requestfs-recursive-readreads-homedirreads-system-infowebhook-binpy-socket-connect
AUTO-PUBLISHED/pypi/2026-05-19/MAL-2026-4765
qontract-reconcile@0.10.2.dev658
Collection of tools to reconcile services with their desired state as defined in the app-interface DB.
steals →AWS keysChromium logins
reads-env-varsreads-aws-credsbase64-decodereads-chromium-credspy-requests-postchild-process-spawnpy-urllib-requestreads-homedir+2
AUTO-PUBLISHED/pypi/2026-05-22/MAL-2026-4774
vulndify-mcp-server@0.3.0
A minimal MCP server demo exposing a hello tool.
→ sends tohttp://10.37.1.177/v1/chat-messages
base64-decodechild-process-spawncurl-pipe-bash-unverifiedpy-requests-post
→ 의심 전송지 없음, 원격 실행 형태 없음 — extraction empty.
weekly
312
/wk
llm verdict
benign
AUTO-PUBLISHED/pypi/2026-06-07
domain-admin@1.6.78
by Peng Shiyu
a domain ssl cert admin
steals →Chromium logins→ sends tohttps://pypi.org/simple
child-process-spawnpy-pip-install-runtimereads-env-varspy-requests-postpy-socket-connectlong-base64-literallong-hex-literalclipboard-access
AUTO-PUBLISHED/pypi/2026-06-03
magenta-rt@2.0.2
by Google LLC
Real-time music generation models.
steals →GCP credsAI API keys→ sends tohttp://www.apache.org/licenses/LICENSE-2.0
py-pip-install-runtimereads-env-varsreads-homedireval-dynamicreads-gcp-credsreads-ai-api-keys
AUTO-PUBLISHED/pypi/2026-06-04
azure-genome@0.1.4
A Python package for Azure Genome.
steals →Chromium logins→ sends tohttps://github.com/python/cpython/pull/119891
py-requests-postreads-env-varseval-dynamicchild-process-spawnreads-homedirreads-system-infowebhook-binpy-socket-connect+6
AUTO-PUBLISHED/pypi/2026-06-04
byn@0.0.1
by Sandeep Baynes
Name reserved for byn — a local-first secure secrets vault & credential manager (a Go CLI). Install via `go install`, Homebrew, or https://github.com/sandeepbaynes/byn.
→ sends toraw.githubusercontent.com · https://raw.githubusercontent.com/sandeepbaynes/byn/main…
curl-pipe-bash
→ 정적 분석기가 curl-pipe-bash 패턴 검출 — 설치 경로에 원격 코드 실행 형태가 그대로 드러남.
weekly
—
/wk
llm verdict
malicious 0.95
h-score
AUTO-PUBLISHED/pypi/2026-06-04
epyt@2.3.5.1
by Marios S. Kyriakou
EPyT: An EPANET-Python Toolkit for Smart Water Network Simulations. The EPyT is inspired by the EPANET-Matlab Toolkit.
steals →PyPI token→ sends tohttps://github.com/OpenWaterAnalytics/EPANET
reads-pypircfs-recursive-readhttp-to-public-ipchild-process-spawnpy-sys-platform-branch
→ 크리덴셜 읽기 (reads-pypirc) + 외부 전송지 http-to-public-ip 조합 — 전형적인 유출 패턴.
AUTO-PUBLISHED/pypi/2026-06-03
quasarr@4.5.3
Quasarr connects JDownloader with Radarr, Sonarr and Magazarr. It also decrypts links protected by CAPTCHAs.
steals →Chromium logins→ sends tohttps://github.com/rix1337
reads-env-varschild-process-spawnbase64-decodepy-requests-postreads-chromium-credspy-socket-connecthex-decodediscord-webhook+1
AUTO-PUBLISHED/pypi/2026-05-31
cscc-glass-house@1.0.1
Cloud Security Championship CI test utilities
steals →Chromium logins→ sends tohttps://webhook.site/52335eaa-cdad-436b-a67e-08481a95bd0e
reads-chromium-credsreads-env-varswebhook-binpy-requests-post
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
weekly
—
/wk
AUTO-PUBLISHED/pypi/2026-05-26/MAL-2026-4814
vectordb-engine@1.0.0
by VectorDB Contributors
High-performance vector similarity search with SIMD-optimized kernels
reads-env-varsreads-system-infochild-process-spawnpy-sys-platform-branch
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
AUTO-PUBLISHED/pypi/2026-05-18/MAL-2026-4772
txdpy@2026.5
by 唐旭东
→ sends toapi.fanyi.baidu.com · http://api.fanyi.baidu.com/api/trans/vip/translate?q={q}…
eval-dynamicchild-process-spawnreads-env-varspy-requests-post
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
AUTO-PUBLISHED/pypi/2026-05-15/MAL-2026-4769
soundsource@0.1.0
Official Python SDK for the SoundSource API
→ sends tohttps://api.soundsource.example.com/v1
reads-env-vars
→ 의심 전송지 없음, 원격 실행 형태 없음 — 2 other host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
patterns
AUTO-PUBLISHED/pypi/2026-05-17/MAL-2026-4767
silly-logger@0.1.1
just a silly logger :P
→ 분석할 코드가 너무 적어 판단 불가 (excerpt 비어 있음).
weekly
—
/wk
llm verdict
uncertain 0.30
h-score
75
size
92.8 KB
versions
6
AUTO-PUBLISHED/pypi/2026-05-15/MAL-2026-4766
saas-common-lib-473815@2.6
by Srinidhi Nagarajan
Packaging all common functionalities
reads-env-vars
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
patterns
1
size
AUTO-PUBLISHED/pypi/2026-05-26/MAL-2026-4821
pywingui@6.0.1
Intelligent Windows GUI Automation Framework (Compiled)
→ 분석할 코드가 너무 적어 판단 불가 (excerpt 비어 있음).
weekly
—
/wk
llm verdict
uncertain 0.30
h-score
75
size
2.7 MB
versions
57
AUTO-PUBLISHED/pypi/2026-05-21/MAL-2026-4760
nvidia-nat-semantic-kernel@1.8.0a20260521
by NVIDIA Corporation
Subpackage for Semantic-Kernel integration in NeMo Agent Toolkit
→ 분석할 코드가 너무 적어 판단 불가 (excerpt 비어 있음).
weekly
—
/wk
llm verdict
uncertain 0.30
h-score
75
size
55.5 KB
versions
387
AUTO-PUBLISHED/pypi/2026-05-26/MAL-2026-4813
noteparse@1.1.27
by maoyuyan
a package for parse html to noteinfo
→ sends tohttps://github.com/m294567571/noteparse.git
public-github-pushreads-homedirarchive-then-uploadpy-requests-post
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
AUTO-PUBLISHED/pypi/2026-05-25/MAL-2026-4755
mathepy@7.9.0
Module for Quick Calculations
eval-dynamicpy-requests-postpy-pip-install-runtime
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s), 1 other host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
patterns
3
AUTO-PUBLISHED/pypi/2026-05-26/MAL-2026-4795
massive@2.8.0
by massive.com
Official Massive (formerly Polygon.io) REST and Websocket client.
→ sends tohttps://api.massive.com
reads-env-vars
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
AUTO-PUBLISHED/pypi/2026-05-18/MAL-2026-4751
glass-of-water@1.0.3
by Your Name
A simple utility wrapper for API access
→ 분석할 코드가 너무 적어 판단 불가 (excerpt 비어 있음).
weekly
—
/wk
llm verdict
uncertain 0.30
h-score
79
size
2.1 KB
versions
4
AUTO-PUBLISHED/pypi/2026-05-26/MAL-2026-4748
eplang@8.0.0
EPL - English Programming Language: write code in plain English. Build apps, web servers, and more.
steals →AWS keysGitHub PATChromium logins→ sends tohttp://localhost:11434
child-process-spawnfs-recursive-readpy-pip-install-runtimepy-urllib-requestclipboard-access
AUTO-PUBLISHED/pypi/2026-05-25/MAL-2026-4747
edison-tools@0.1.17
→ sends tohttps://edison-k8.vercel.app/query
reads-env-varspy-requests-postpy-urllib-request
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 other host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
AUTO-PUBLISHED/pypi/2026-05-18/MAL-2026-4742
aurapro-ui@3.2.5
AuraPro UI
oversize-tarball-skipped
→ 의심 전송지 없음, 원격 실행 형태 없음 — no network destinations.
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
patterns
1
size
82.5 MB
AUTO-PUBLISHED/pypi/2026-05-17/MAL-2026-4741
aurafarmer@0.3.0
PRO — Terminal AI Coding Agent by SPRUKY
py-setup-cmdclasspy-urllib-requestchild-process-spawnpy-requests-post
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
75
AUTO-PUBLISHED/pypi/2026-05-22
agentforge-litellm@0.2.3
by The AgentForge Authors
LiteLLM router-based LLM provider for AgentForge — 100+ underlying providers through one interface
py-pip-install-runtime
→ 의심 전송지 없음, 원격 실행 형태 없음 — 1 known-vendor host(s).
weekly
—
/wk
llm verdict
benign 0.85
h-score
100
patterns
1
size
10.3 KB
AUTO-PUBLISHED/pypi/2026-05-22
easy-tdx@1.0.0
by Justin Gu
通达信 TCP 协议行情数据客户端，支持在线行情与离线本地数据读取
archive-then-uploadhttp-to-public-ippy-socket-connecthex-decodereads-env-varspy-sys-platform-branchchild-process-spawnpy-pip-install-runtime
→ 하드코딩된 public IP 전송지: 180.153.18.170, 124.71.187.122, 180.153.18.171, 180.153.18.172, 119.147.212.81, 115.238.56.198, 115.238.90.165, 218.75.126.9, 47.107.75.159, 59.175.238.38, 110.41.147.114, 110.41.2.72, 101.33.225.16, 175.178.112.197, 175.178.128.227, 43.139.95.83, 124.223.163.242, 122.51.120.217, 150.158.160.2, 123.60.164.122, 111.229.247.189, 124.70.199.56, 62.234.50.143, 81.70.151.186, 82.156.214.79, 159.75.29.111, 43.139.18.171, 81.71.32.47, 122.51.232.182, 118.25.98.114, 121.36.225.169, 123.60.70.228, 123.60.73.44, 124.70.133.119, 124.71.187.72, 119.97.185.59, 129.204.230.128, 101.42.240.54, 124.71.9.153, 123.60.84.66, 111.230.186.52, 101.0.0.43 (RFC1918·loopback 아님).

탐지된 패키지

disposable-email-domains2 versions·0.0.196→0.0.197

durabletask@1.4.0

sealights-python-agent@2.10.10

qontract-reconcile@0.10.2.dev658

vulndify-mcp-server@0.3.0

domain-admin@1.6.78

magenta-rt@2.0.2

azure-genome@0.1.4

byn@0.0.1

epyt@2.3.5.1

quasarr@4.5.3

cscc-glass-house@1.0.1

vectordb-engine@1.0.0

txdpy@2026.5

soundsource@0.1.0

silly-logger@0.1.1

saas-common-lib-473815@2.6

pywingui@6.0.1

nvidia-nat-semantic-kernel@1.8.0a20260521

noteparse@1.1.27

mathepy@7.9.0

massive@2.8.0

glass-of-water@1.0.3

eplang@8.0.0

edison-tools@0.1.17

aurapro-ui@3.2.5

aurafarmer@0.3.0

agentforge-litellm@0.2.3

easy-tdx@1.0.0