PyPI/aiocpa: unknown

aiocpa 0.1.13 contains credential harvesting code

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2024-152
• https://inspector.pypi.io/project/aiocpa/0.1.13/packages/ab/98/7343281068a2c39086d0b877219668a487508197f46e89b3f41046a4a8ba/aiocpa-0.1.13.tar.gz/aiocpa-0.1.13/cryptopay/utils/sync.py#line.44
• https://blog.pypi.org/posts/2024-11-25-aiocpa-attack-analysis/

published 2024-11-25T19:30:00Z · modified 2024-11-25T19:30:00Z · JSON