pypi · Malicious package advisory
Malwarepywolle
MAL-2023-8590
Malicious code in pywolle (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: checkmarx (022272b8427ab42c0c793e5ec56175de59c7f142f82db252e890e9782845d762) Malicious packages campaign targeting developers, payload is hidden using Steganography, exfiltrate host information
Compromised versions (1)
- 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.