Your RSA-2048 keys break in 2030. Find every one of them before attackers do.See CBOMkit
Malicious package campaign
2024-11-byted-dast
The 2024-11-byted-dast campaign published 183 malicious PyPI packages. See the full package list, timeline, and how to check whether your dependency tree pulled any of them in.
Malicious packages
183
Advisories
183
Ecosystem
PyPI
First seen
2024-11-05
What to do if you depend on any of these
Every package below was published as malicious under 2024-11-byted-dast. Treat any machine that installed one as compromised: remove the package and its lockfile entry, rotate every credential the build or runtime could reach (registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values) from a known-clean machine, and audit for unexpected outbound activity.
Because the packages share a campaign, a project that pulled in one has an elevated chance of having pulled in others. Search your lockfiles for 2024-11-byted-dast rather than checking a single package name.
All 183 packagesPyPI
- adanbuView advisory →
- adanduView advisory →
- adandvView advisory →
- affinequantView advisory →
- aslmutetionView advisory →
- asmutationView advisory →
- babetmfView advisory →
- baibitmfView advisory →
- batchranView advisory →
- bebitmfView advisory →
- byte-flux-3822a6dd00d6414daba3ae0de3930a5aView advisory →
- bytebsView advisory →
- byted-flexView advisory →
- byted-fluxView advisory →
- bytedplusView advisory →
- bytedplus-recView advisory →
- bytedpsView advisory →
- bytedspView advisory →
- byteffView advisory →
- bytekafkaView advisory →
- bytekafka-0-0-15View advisory →
- bytekafka-0-15View advisory →
- bytekafka0-0-15View advisory →
- bytemlperfView advisory →
- bytepView advisory →
- bytepilotView advisory →
- bytepilot-0-0-15View advisory →
- byteppsView advisory →
- byteqsView advisory →
- bytesapView advisory →
- byteseepView advisory →
- bytesipView advisory →
- bytespView advisory →
- cascadevView advisory →
- compresaiView advisory →
- compressaView advisory →
- compressiView advisory →
- control4d-multiviewView advisory →
- controlnot-auxView advisory →
- cryostarView advisory →
- dbt-bytedhouseView advisory →
- dbt-byteshouseView advisory →
- ddimView advisory →
- deadiffView advisory →
- decompoptView advisory →
- deepsolidView advisory →
- detecron2View advisory →
- detectrenView advisory →
- detectron4View advisory →
- distproView advisory →
- dreamfusionView advisory →
- dtb-bytehouseView advisory →
- e3poView advisory →
- easydictsView advisory →
- emumonitorView advisory →
- fadlearnerView advisory →
- fairseqnView advisory →
- fairsequenceView advisory →
- fantasia3dView advisory →
- fc-clipView advisory →
- feature-preserve-portrait-editingView advisory →
- fedddecorrView advisory →
- feddecorView advisory →
- feddecorrView advisory →
- fedlearnerrView advisory →
- fedlearnreView advisory →
- ferminet-with-ecpView advisory →
- giantmidi-pianoView advisory →
- gr-mgView advisory →
- gym-reschdule-combinationView advisory →
- habitmfView advisory →
- hllmView advisory →
- huggingface-hubsView advisory →
- huggingfaces-hubView advisory →
- hybrid-sdView advisory →
- ic-flow-platformView advisory →
- ic-flows-platformView advisory →
- image-dreamView advisory →
- imagedreamView advisory →
- imagedreamfusionView advisory →
- imageoiView advisory →
- importlib-resourceView advisory →
- importlibs-resourceView advisory →
- importlibs-resourcesView advisory →
- instructnerf2nerfView advisory →
- irasimView advisory →
- jaqmcView advisory →
- kera-preprocessView advisory →
- kera-preprocessingView advisory →
- keras-preprocessView advisory →
- laghtseqView advisory →
- lanm-neoView advisory →
- lapnetView advisory →
- largebatchctrView advisory →
- larger-batch-ctrView advisory →
- latentnerfView advisory →
- libbmetView advisory →
- licensemonitorView advisory →
- lightseeqView advisory →
- lightseqeView advisory →
- lightsequView advisory →
- lightsuqView advisory →
- macaquaView advisory →
- machaqueView advisory →
- macqueView advisory →
- magic3dView advisory →
- mega-sparksView advisory →
- megaiView advisory →
- midi-melady-extractionView advisory →
- midi-melody-extractionView advisory →
- midi-melody-extractionsView advisory →
- mnolithView advisory →
- monlithView advisory →
- monolihtView advisory →
- monolitView advisory →
- mqbenchView advisory →
- mtvqaView advisory →
- music-source-separationView advisory →
- mvdreamView advisory →
- mvdream-threestudioView advisory →
- nerstView advisory →
- netobsView advisory →
- neurstsView advisory →
- next-vitView advisory →
- nuerstView advisory →
- nuestView advisory →
- nursetView advisory →
- nurstView advisory →
- oclipView advisory →
- oclipsView advisory →
- offline-rl-congestion-controlView advisory →
- ohtaView advisory →
- omgdView advisory →
- open-clips-torchView advisory →
- openfermionpyscafView advisory →
- openfermionpyscanfView advisory →
- opteinsmView advisory →
- para-genView advisory →
- paws-room-acoustics-simulatorView advisory →
- physisyphusView advisory →
- piano-transcriptionView advisory →
- portrait-mode-videoView advisory →
- projectpView advisory →
- prolificdreamerView advisory →
- pysisphusView advisory →
- pysisyphesView advisory →
- pytorch-lightingView advisory →
- pyyalView advisory →
- raylinkView advisory →
- raylinksView advisory →
- res-adapterView advisory →
- rl-vm-schedulingView advisory →
- salmonnView advisory →
- sampling-utilView advisory →
- service-affinity-schedulingView advisory →
- shadokvView advisory →
- shadowkwView advisory →
- shaiduwkvView advisory →
- shot2storyView advisory →
- sjcView advisory →
- sphinx-rdt-themeView advisory →
- sphinx-rtd-themesView advisory →
- tarseirView advisory →
- tarsieView advisory →
- tarsireView advisory →
- textharmonyView advisory →
- textmeshView advisory →
- tiketokenView advisory →
- tktokenView advisory →
- torchs-visionsView advisory →
- torchvisionsView advisory →
- type-extensionView advisory →
- typing-extensionView advisory →
- usssView advisory →
- uusView advisory →
- uussView advisory →
- v2mlx-gmlView advisory →
- v2xlm-gmlView advisory →
- vtvqaView advisory →
- x-portraitView advisory →
- x2vml-gmlView advisory →
- x2vmlgmlView advisory →
- zero123View advisory →