PYSEC-2025-72
PYSEC-2025-72 · After a successful phishing attack, new versions of `num2words` were published containing malware.
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The `num2words` project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions have been removed from PyPI, and users are advised to remove the affected versions from their environments.
- Publicación
- Actualización
Pila tecnológica: python
Productos y versiones afectados
num2words PyPI
- Versiones
- 0.5.15
- 0.5.16
Sin corrección publicada