WINRPCexploit

GHSA-58g2-rgrr-6q9r

WINRPCexploit malicious PyPI package

Details

**Severity:** High

**Affected versions:** `>= 0`

Security researchers at Check Point Research discovered a malicious package called `WINRPCexploit`. PyPI has since removed `WINRPCexploit`.

**References:**
- https://pypi.org/project/WINRPCexploit/
- https://research.checkpoint.com/2022/cloudguard-spectral-detects-several-malicious-packages-on-pypi-the-official-software-repository-for-python-developers/
- https://github.com/advisories/GHSA-58g2-rgrr-6q9r

Compromised versions (1)

>= 0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.