GitHub Advisoryadvisory · PyPI

GHSA-5grr-72f9-678v Malware package cipherbcrypt

HIGH Published 2024-07-12 Modified 2024-07-12 Official page ↗

Ecosystem: PyPI
Packages: cipherbcrypt
Severity: High
Reviewed: 2024-07-12

Affected packages

• PyPI cipherbcrypt: all versions (no fix yet)

Description

Malicious package. Exfiltrated secrets to a target server.

References