https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-34501.htmlhttps://patchthecve.com/cve/CVE-2022-34501.htmlWed, 17 Jun 2026 04:50:27 +0000CRITICAL 9.8: The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.https://patchthecve.com/cve/CVE-2022-34500.htmlhttps://patchthecve.com/cve/CVE-2022-34500.htmlWed, 17 Jun 2026 04:50:27 +0000CRITICAL 9.8: The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.https://patchthecve.com/cve/CVE-2022-34056.htmlhttps://patchthecve.com/cve/CVE-2022-34056.htmlWed, 17 Jun 2026 04:49:42 +0000CRITICAL 9.8: The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-34055.htmlhttps://patchthecve.com/cve/CVE-2022-34055.htmlWed, 17 Jun 2026 04:49:42 +0000CRITICAL 9.8: The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-34054.htmlhttps://patchthecve.com/cve/CVE-2022-34054.htmlWed, 17 Jun 2026 04:49:42 +0000CRITICAL 9.8: The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-34053.htmlhttps://patchthecve.com/cve/CVE-2022-34053.htmlWed, 17 Jun 2026 04:49:42 +0000CRITICAL 9.8: The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-33004.htmlhttps://patchthecve.com/cve/CVE-2022-33004.htmlWed, 17 Jun 2026 04:48:22 +0000CRITICAL 9.8: The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-33003.htmlhttps://patchthecve.com/cve/CVE-2022-33003.htmlWed, 17 Jun 2026 04:48:21 +0000CRITICAL 9.8: The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-33002.htmlhttps://patchthecve.com/cve/CVE-2022-33002.htmlWed, 17 Jun 2026 04:48:21 +0000CRITICAL 9.8: The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-33001.htmlhttps://patchthecve.com/cve/CVE-2022-33001.htmlWed, 17 Jun 2026 04:48:21 +0000CRITICAL 9.8: The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-33000.htmlhttps://patchthecve.com/cve/CVE-2022-33000.htmlWed, 17 Jun 2026 04:48:21 +0000CRITICAL 9.8: The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-32999.htmlhttps://patchthecve.com/cve/CVE-2022-32999.htmlWed, 17 Jun 2026 04:48:21 +0000CRITICAL 9.8: The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-32998.htmlhttps://patchthecve.com/cve/CVE-2022-32998.htmlWed, 17 Jun 2026 04:48:21 +0000CRITICAL 9.8: The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-32997.htmlhttps://patchthecve.com/cve/CVE-2022-32997.htmlWed, 17 Jun 2026 04:48:21 +0000CRITICAL 9.8: The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.https://patchthecve.com/cve/CVE-2022-32996.htmlhttps://patchthecve.com/cve/CVE-2022-32996.htmlWed, 17 Jun 2026 04:48:21 +0000CRITICAL 9.8: The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.