pypi · Malicious package advisory
Malwarepyalicet
MAL-2024-1050
Malicious code in pyalicet (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: ossf-package-analysis (96a6abcd56ea94e027d0d68089a1b6f29312c009aa9be7d80c4b0e33bf0e6396) The OpenSSF Package Analysis project identified 'pyalicet' @ 0.0.3 (pypi) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Compromised versions (2)
- 0.0.3
- 0.0.4
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.