PyPI/num2words: unknown
After a successful phishing attack, new versions of `num2words` were published containing malware.
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-72
- https://nitter.tiekoetter.com/SFLinux/status/1949906299308953827
- https://www.stepsecurity.io/blog/supply-chain-security-alert-num2words-pypi-package-shows-signs-of-compromise
published · modified · JSON