GHSA-x6xg-3fj2-4pq3
GHSA-x6xg-3fj2-4pq3 · `exotel` project on PyPI compromised, malicious release made
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran malware at install time
- Published
- Updated
Stack: python
Affected products and versions
exotel PyPI
- Versions
- 0.1.6
No fix published