PyPI/ctx: unknown
The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project which contained runtime code which collected the content of os.environ.items() when inst
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.2-1 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2022-199
- https://python-security.readthedocs.io/pypi-vuln/index-2022-05-24-ctx-domain-takeover.html
published · modified · JSON