PyPI/sentinelone: high
SentinelOne impersonated via PyPI packages
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | - | 1.2.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g86j-hwg9-77q5
- https://pypi.org/project/SentinelOne
- https://www.reversinglabs.com/blog/sentinelsneak-malicious-pypi-module-poses-as-security-sdk
published · modified · JSON