pypi · Malicious package advisory
Malwarelibblas3
MAL-2023-8304
Malicious code in libblas3 (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: ossf-package-analysis (2ce6c63048cc523093131cc1ce9bdc1581093b52f97225581ea78fef61404e8a) The OpenSSF Package Analysis project identified 'libblas3' @ 0.0.1 (pypi) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Compromised versions (1)
- 0.0.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.