PYSEC-2024-1
PYSEC-2024-1 · gratient 0.5 contains credential harvesting code
This page contains facts from public vulnerability sources. Check the original advisory before updating.
gratient is a user-facing library for generating color gradients of text. Version 0.5 contained obfuscated, malicious code targeting Windows platforms, harvesting information and credentials from the user's system and sending them to a remote server. Services may include Mullvad VPN and Telegram.
- Published
- Updated
Stack: python
Affected products and versions
gratient PyPI
- Versions
- 0.5
No fix published