PyPI/pantheon-agents: critical
Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
Action: Upgrade pantheon-agents to 0.6.4 or later.
pip install pantheon-agents==0.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.6.1 | 0.6.4 | - |
Fixed versions
| 0.6.4 |
Sources
- osv: GHSA-93qj-5q5v-3c2h
- https://github.com/aristoteleo/PantheonOS/security/advisories/GHSA-93qj-5q5v-3c2h
- https://github.com/aristoteleo/PantheonOS
published · modified · JSON