PyPI/dydx-v4-client: critical
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
Action: Upgrade dydx-v4-client to 1.1.5 or later.
pip install dydx-v4-client==1.1.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.5.post1 | 1.1.5 | - |
Fixed versions
| 1.1.5 |
Sources
- osv: GHSA-4f84-67cv-qrv3
- https://github.com/lenktn/lenktn-dydx-v4-python
- https://github.com/pypa/advisory-database/tree/main/vulns/dydx-v4-client/PYSEC-2026-1.yaml
- https://inspector.pypi.io/project/dydx-v4-client/1.1.5.post1/packages/4b/06/4d848676e932b0fc9d707bb78603dc76555141cc832819cd1e5077bdf2a2/dydx_v4_client-1.1.5.post1.tar.gz/dydx_v4_client-1.1.5.post1/dydx_v4_client/_bootstrap.py#line.18
published · modified · JSON