PYSEC-2024-152
PYSEC-2024-152 · aiocpa 0.1.13 contains credential harvesting code
This page contains facts from public vulnerability sources. Check the original advisory before updating.
aiocpa is a user-facing library for generating color gradients of text. Version 0.1.13 introduced obfuscated, malicious code targeting Crypto Pay users, forwarding client credentials to a remote Telegram bot. All versions have been removed from PyPI.
- Published
- Updated
Stack: python
Affected products and versions
aiocpa PyPI
- Versions
- 0.1.13
- 0.1.14
No fix published