PYSEC-2025-72
PYSEC-2025-72 · After a successful phishing attack, new versions of `num2words` were published containing malware.
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The `num2words` project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions have been removed from PyPI, and users are advised to remove the affected versions from their environments.
- Publication
- Mise à jour
Pile logicielle: python
Produits et versions concernés
num2words PyPI
- Versions du logiciel
- 0.5.15
- 0.5.16
Aucun correctif publié