PYSEC-2025-72
PYSEC-2025-72 · After a successful phishing attack, new versions of `num2words` were published containing malware.
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The `num2words` project was compromised via a phishing attack and two new versions were uploaded to PyPI containing malicious code. The affected versions have been removed from PyPI, and users are advised to remove the affected versions from their environments.
- Published
- Updated
Stack: python
Affected products and versions
num2words PyPI
- Versions
- 0.5.15
- 0.5.16
No fix published